CVE-2018-8740: NULL Pointer Dereference

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

CVE-2018-8740

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

CVE-2018-8740

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

PT-2018-3489

Name of the Vulnerable Software and Affected Versions: SQLite versions prior to 3.22.0 Description: The issue is related to a NULL pointer dereference in the SQLite database management system. It occurs when a database's schema is corrupted using a CREATE TABLE AS statement, specifically involvin...

SQLite -- Corrupt DB can cause a NULL pointer dereference

MITRE reports: SQLite databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

DEBIAN-CVE-2017-12194

A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the client or execute arbitrary code with permissions of the user running the client. spice-gtk versions through 0.34 are...

Exploit for Path Traversal in Sap Customer_Relationship_Management

CVE-2018-2380 CVSS v3 Base Score: 6.6/10 PoC of Remote Comma...

Red Hat CloudForms Management Engine Design Vulnerability

The Red Hat CloudForms Management Engine CFME is a management engine for IaaS Infrastructure as a Service cloud services solutions from Red Hat, Inc. A security vulnerability exists in the CloudForms account configuration in Red Hat CFME. An attacker could use the vulnerability to view and change...

Trend Micro Email Encryption Gateway XSS / Code Execution

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ Trend Micro Email Encryption Gateway Multiple Vulnerabilities 1. Advisory Information Title: Trend Micro Email Encryption Gateway Multiple Vulnerabilities Advisory ID: CORE-2017-0006 Advisory URL:...

CVE-2018-2371

CVE-2018-2371 affects SAP NetWeaver AS Java Web Application (SAML 2.0 SP) 7.50. The issue is insufficient encoding of user-controlled inputs, causing Cross-Site Scripting (XSS). CVSSv3 base 6.1 (NETWORK, LOW ATTACK COMPLEXITY, UI REQUIRED, CHANGED SCOPE; CONFIDENTIALITY/INTEGRITY LOW) and CVSSv2 ...

CVE-2018-2371: Improper Neutralization of Input During Web Page Generation

The SAML 2.0 service provider of SAP Netweaver AS Java Web Application, 7.50, does not sufficiently encode user controlled inputs, which results in Cross-Site Scripting XSS vulnerability...

PT-2018-15504

Name of the Vulnerable Software and Affected Versions SAP Netweaver AS Java Web Application version 7.50 Description The SAML 2.0 service provider does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting XSS issue. Recommendations For SAP Netweaver AS Java Web...

Moderate: Red Hat Security Advisory: openstack-aodh security update

An update for openstack-aodh is now available for Red Hat OpenStack Platform 11.0 Ocata. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Gojdue Variant Eludes Microsoft, Google Cloud Protection, Researchers Say

Researchers have identified a new ransomware strain that went undetected by built-in anti-malware protection used by cloud heavyweights Microsoft and Google as recently as January. According to researchers at the cloud service firm Bitglass, both Google Drive and Microsoft Office 365’s SharePoint...

as-immobilier.fr XSS vulnerability

Open Bug Bounty ID: OBB-554286 Description| Value ---|--- Affected Website:| as-immobilier.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-1196

Spring Boot supports an embedded launch script that can be used to easily run the application as a systemd or init.d linux service. The script included with Spring Boot 1.5.9 and earlier and 2.0.0.M1 through 2.0.0.M7 is susceptible to a symlink attack which allows the "runuser" to overwrite and...

PT-2018-17450

Name of the Vulnerable Software and Affected Versions Kaspersky Secure Mail Gateway version 1.1 Description The issue is related to configuration file injection, which can lead to code execution as root. Recommendations For Kaspersky Secure Mail Gateway version 1.1, update to a version that fixes...

ManageEngine EventLog Analyzer - Multiple Vulnerabilities (2)

Exploit for multiple platform in category web applications Multiple vulnerabilities in ManageEngine EventLog Analyzer Discovered by Pedro Ribeiro email protected, Agile Information Security ========================================================================== Disclosure: 05/11/2014 / Last...

CVE-2017-1000433: Improper Authentication

pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password...

Two Sides App has an override access vulnerability

Two Sides APP is an emotional, psychological and fun social software launched by Beijing Two Sides Network Technology Co. Two Sides APP 3.0.28 Android version has an override access vulnerability, after logging in to the system, an attacker can log in to other users' systems and perform...