CVE-2018-18827

There exists a heap-based buffer over-read in ffvc1preddc in vc1block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file...

CVE-2018-18475

Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload...

CVE-2018-18475

Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload...

Zoho ManageEngine OpManager Arbitrary File Upload Vulnerability

Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. An arbitrary file upload vulnerability exists in Zoho ManageEngine OpManager version 12.3, which can be successfully exploited to allow remote code execution on the target host...

CVE-2018-18262

Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...

Cross site scripting

Zoho ManageEngine OpManager 12.3 before build 123214 has XSS...

ManageEngine OPManager 12.3 Cross Site Scripting Vulnerability

ManageEngine OPManager version 12.3 suffers from a persistent cross site scripting vulnerability...

CVE-2018-0045

Receipt of a specific Draft-Rosen MVPN control packet may cause the routing protocol daemon RPD process to crash and restart or may lead to remote code execution. By continuously sending the same specific Draft-Rosen MVPN control packet, an attacker can repeatedly crash the RPD process causing a...

Sql injection

Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection...

CVE-2018-3050

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network...

UBUNTU-CVE-2018-11224

An issue was discovered in Libav 12.3. A read access violation in the intableinit16 function in libavcodec/aacsbr.c allows remote attackers to cause a denial of service application crash, as demonstrated by avconv...

CVE-2018-11224

An issue was discovered in Libav 12.3. A read access violation in the intableinit16 function in libavcodec/aacsbr.c allows remote attackers to cause a denial of service application crash, as demonstrated by avconv...

CVE-2018-11224

CVE-2018-11224 affects Libav 12.3. The issue is a read access violation in the in_table_init16 function of libavcodec/aacsbr.c, enabling a remote attacker to cause a denial of service (application crash) as demonstrated by avconv. The connected documents provide identical vulnerability descriptio...

CVE-2018-11102

An issue was discovered in Libav 12.3. A read access violation in the movprobe function in libavformat/mov.c allows remote attackers to cause a denial of service application crash, as demonstrated by avconv...

Libav Denial of Service Vulnerability (CNVD-2018-10595)

Libav formerly FFmpeg is Libav team's set of cross-platform audio and video can be recorded, converted to a solution, which includes a libavcodec encoder. A security vulnerability exists in the 'movprobe' function in the libavformat/mov.c file in Libav version 12.3. A remote attacker can exploit...

ZOHO ManageEngine NetFlow Analyzer Cross-Site Scripting Vulnerability

ZOHO ManageEngine Netflow Analyzer is a set of Web-based bandwidth monitoring tools from ZOHO. A cross-site scripting vulnerability exists in the Add Credentials feature in ZOHO ManageEngine NetFlow Analyzer version 12.3.125 build 123125 prior to version 12.3. A remote attacker can exploit this...

CVE-2018-5735

The Debian backport of the fix for CVE-2017-3137 leads to assertion failure in validator.c:1858; Affects Debian versions 9.9.5.dfsg-9+deb8u15; 9.9.5.dfsg-9+deb8u18; 9.10.3.dfsg.P4-12.3+deb9u5; 9.11.5.P4+dfsg-5.1 No ISC releases are affected. Other packages from other distributions who did similar...

openSUSE Security Update : xen (openSUSE-2017-1071)

This update for xen fixes several issues. These security issues were fixed : - CVE-2017-14316: Missing bound check in function allocheappages for an internal array allowed attackers using crafted hypercalls to execute arbitrary code within Xen XSA-231, bsc1056278 - CVE-2017-14318: The function...

Juniper Networks Junos OS libc Vulnerability

Junos OS is prone to a vulnerability in libc. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos"; if description...

Juniper Networks Junos OS Multiple Privilege Escalation Vulnerabilities (JSA10739)

Junos OS is prone to multiple privilege escalation vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:juniper:junos...