16655 matches found
CVE-2017-4934
VMware Workstation 12.x before 12.5.8 and Fusion 8.x before 8.5.9 contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host...
CVE-2017-16844
Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted e-mail message because of a hardcoded realloc size, a different vulnerability than...
Microsoft Internet Explorer/Edge Memory Corruption Vulnerability
Internet Explorer is a web browser from Microsoft.Microsoft Edge is the web browser built into Windows 10 versions. A memory corruption vulnerability exists in Microsoft Internet Explorer/Edge, which could allow an unauthenticated, remote attacker to execute arbitrary code on the target system...
Adobe Flash Player Memory Misreference Vulnerability (CNVD-2017-37245)
Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. A remote attacker could exploit this vulnerabili...
Microsoft Edge Memory Corruption Vulnerability (CNVD-2017-34926)
Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge is implemented with a memory corruption vulnerability that can be exploited by unauthenticated, remote attackers to execute arbitrary code on the target system and corrupt memory...
Debian DLA-1171-1 : libxml-libxml-perl security update
The XML::LibXML perl module is affected by a 'use-after-free' vulnerability which allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call. For Debian 7 'Wheezy', these problems have been fixed in version 2.0001+dfsg-1+deb7u2. We recommend that you...
CommuniGatePro 6.1.16 - Cross-Site Scripting
CommuniGatePro 6.1.16 - Cross-Site Scripting Exploit Title: CommuniGatePro webmails Multiple Stored XSS Date: 15/11/2017 Exploit Author: Boumediene KADDOUR Unit: Algerie Telecom R&D Unit Vendor Homepage: https://www.stalker.com/ Software Link: http://www.stalker.com/ paid product Version: 6.1.16...
PT-2017-18892
Name of the Vulnerable Software and Affected Versions CA Identity Governance version 12.6 Description A stored cross-site scripting issue allows remote authenticated attackers to display HTML or execute script in the context of another user. Recommendations For CA Identity Governance version 12.6...
Microsoft Edge Scripting Engine CVE-2017-11862 Remote Memory Corruption Vulnerability
Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft ChakraCore Microsoft...
Foxit Reader JPEG2000 cdef channel number Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the channel...
KLA11140 Multiple vulnerabilities in Microsoft Edge and Internet Explorer
Multiple serious vulnerabilities have been found in Microsoft Edge and Internet Explorer. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions and obtain sensitive information. Original advisories CVE-2017-11791 CVE-2017-11803 CVE-2017-11827...
CVE-2017-13816
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "libarchive" component. It allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow and application crash via a crafted archive file...
CVE-2017-13788
An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote...
Buffer overflow
Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of service heap corruption and crash or execute arbitrary code via a long string to the open method...
Cross-site Scripting (XSS)
github.com/koding/koding is vulnerable to cross-site scripting XSS attacks. The library does not properly encode content in client/Main/CommonViews/suggestedtokenview.coffee, allowing a malicious user to inject and execute arbitrary webscript...
semcms the background to bypass getshell
No description provided by source...
KLA11132 Multiple vulnerabilities in Google Chrome
Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause a denial of service and to execute arbitrary code. Below is a complete list of vulnerabilities: 1. Stack buffer overflow in QUIC can be exploited remotely by an...
Xlight FTP Server 3.8.8.5 - Buffer Overflow (PoC)
Xlight FTP Server 3.8.8.5 - Buffer Overflow PoC !/usr/bin/python Exploit Author: bzyo Twitter: @bzyo Exploit Title: Xlight FTP Server x86/x64 - Buffer Overflow Crash PoC Date: 07-11-2017 Vulnerable Software: Xlight FTP Server v3.8.8.5 x86/x64 Vendor Homepage: http://www.xlightftpd.com/ Version:...
HP Performance Center Cross-Site Scripting Vulnerability
HP Performance Center is a suite of performance load testing software from Hewlett Packard Enterprise HPE. A cross-site scripting vulnerability exists in HP Performance Center version 12.20, which stems from the program failing to filter user-submitted input. A remote attacker could use this...
