CVE-2018-8735

Remote command execution RCE vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands on the target system, aka OS command injection...

CVE-2018-8736

A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability escalating to root...

Design/Logic Flaw

Unquoted Windows search path vulnerability in the srvInventoryWebServer service in 10-Strike Network Monitor 5.4 allows local users to gain privileges via a malicious artefact...

CVE-2017-18206

In utils.c in zsh before 5.4, symlink expansion had a buffer overflow...

CVE-2017-18206

In utils.c in zsh before 5.4, symlink expansion had a buffer overflow...

CVE-2017-18205

In builtin.c in zsh before 5.4, when sh compatibility mode is used, there is a NULL pointer dereference during processing of the cd command with no argument if HOME is not set...

CVE-2018-2691

Vulnerability in the Oracle User Management component of Oracle E-Business Suite subcomponent: Proxy User Delegation. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

Security Bulletin: NVIDIA SHIELD Tablet Security Updates for CPU Speculative Side Channel Vulnerabilities

NVIDIA SHIELD Tablet Response to CPU Speculative Side Channel Vulnerabilities - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Go to NVIDIA Product Security. Bulletin Summary NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero's January 3, 2018, publication of...

Photo Fusion 1.0 Cross Site Scripting

Exploit Title: Photo Fusion - Free Stock Photos Script - Xss Google Dork: N/A Date: 2017/31/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://codecanyon.net/user/teamworktec Software Buy:...

Fortinet FortiOS Information Disclosure Vulnerability (CNVD-2017-37067)

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. An information...

pcc - PHP Secure Configuration Checker

Check current PHP configuration for potential security flaws. Simply access this file from your webserver or run on CLI. Author This software was written by Ben Fuhrmannek, SektionEins GmbH, in an effort to automate php.ini checks and spend more time on cheerful tasks. Idea one single file for ea...

Apple macOS Server and macOS High Sierra Postfi Elevation of Privilege Vulnerability

Apple macOS Server and macOS High Sierra are both products of Apple. apple macOS Server is a server designed for macOS and iOS that provides team collaboration, software development, website hosting, and more. macOS High Sierra is a suite of specialized operating systems developed for Mac...

Guia de Referência - Red Hat Network Satellite 5.4 Guia de Referência

No description provided...

Apple OS X Server Denial of Service And RCE Vulnerabilities (HT208102)

Apple OS X Server is prone to denial of service DoS and remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. US-CERT encourages users and administrators to review Apple security pages for the following products and apply...

Arbitrary Password Reset Vulnerability in PHPMyWind v5.4

PHPMyWind is a PHP MySQL-based development , W3C-compliant building engine . An arbitrary password reset vulnerability exists in PHPMyWind v5.4. An attacker can exploit this vulnerability to reset a user's password...

About the security content of macOS Server 5.4

About the security content of macOS Server 5.4 This document describes the security content of macOS Server 5.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

CVE-2017-1491

IBM QRadar Network Security 5.4 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM...

CVE-2017-1491

CVE-2017-1491 affects IBM QRadar Network Security 5.4. The vulnerability arises because a negotiation step allows selecting a crypto algorithm that is not the strongest available, potentially weakening protection. The IBM bulletin specifies the affected product/version as IBM QRadar Network Secur...

CVE-2017-1457

CVE-2017-1457 affects IBM QRadar Network Security (XGS/QRadar NS) Web UI via cross-site scripting. The IBM bulletin notes the affected product/version as IBM QRadar Network Security 5.4 and provides remediation: install firmware version 5.4.0.2 (via Local Management Interface updates or SiteProte...