PHP Login & User Management Code Execution Vulnerability

PHP Login & User Management is a set of PHP and MySQL based website user login and registration management script. An arbitrary file upload vulnerability exists in the /classes/profile.class.php file in versions of PHP Login & User Management prior to 4.1.1. A remote attacker can exploit this...

Linux kernel information disclosure vulnerability (CNVD-2018-10857)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'compatgettimex' function in the kernel/compat.c file in Linux kernel versions prior to 4.16.9. A local attacker can exploit thi...

JFrog Artifactory Arbitrary File Upload Vulnerability

JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog that supports clustering and high-availability Docker registries and provides an end-to-end automation solution for tracking artifacts from development to production. An arbitrary file upload...

Linux kernel vhost 'vhost/vhost.c:vhost_new_msg()' function denial of service vulnerability

The Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. vhost is one of the drivers that provides kernel virtio device emulation. A security vulnerability exists in the 'vhost/vhost.c:vhostnewmsg' function of vhost in...

CVE-2018-9118

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter...

tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser

The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...

tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...

tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser

The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktapifprint...

PT-2018-9618 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.16 Description: The issue allows local users to cause a denial of service ata qc leak by triggering certain failure conditions, specifically when physically proximate attackers unplug SAS Host Bus Adapter...

McAfee True Key DLL Sideload Vulnerability

McAfee True Key is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A security vulnerability exists in McAfee True Key versions prior to 4.20.110, which stems from the program's failur...

CVE-2018-7674

The NetIQ Identity Manager user console, in versions prior to 4.7, is susceptible to URL redirection...

NetIQ Identity Manager Man-in-the-Middle Attack Vulnerability

NetIQ Identity Manager is a comprehensive identity and access control solution. A man-in-the-middle attack vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker can bypass certain security restrictions by performing a man-in-the-middle attack...

NetIQ Identity Manager System or Configuration Enumeration Vulnerability

NetIQ Identity Manager is a comprehensive identity and access control solution. A system or configuration enumeration vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker could exploit this vulnerability for system or configuration enumeration using details provided i...

CVE-2018-1348

NetIQ Identity Manager driver, in versions prior to 4.7, allows for an SSL handshake renegotiation which could result in a MITM attack...

CVE-2018-1349

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system or configuration enumeration...

CVE-2018-1350

The NetIQ Identity Manager driver log file, in versions prior to 4.7, provides details that could aid in system enumeration...

Linux kernel denial of service vulnerability (CNVD-2018-04867)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the drivers/net/ethernet/hisilicon/hns/hnsenet.c file in Linux kernel versions prior to 4.13. A local attacker could exploit this...

Linux kernel 'setup_ntlmv2_rsp()' function null pointer dereference vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability in the 'setupntlmv2rsp' function in the fs/cifs/cifsencrypt.c file in versions of Linux kernel prior to 4.11 stems from the program not proper...

Squid Software Foundation Squid HTTP Caching Proxy Denial of Service Vulnerability (CNVD-2018-05766 )

Squid Software Foundation Squid HTTP Caching Proxy is an open source HTTP caching proxy software . A security vulnerability exists in the handling of HTTP Response X-Forwarded-For packet headers in versions of Squid Software Foundation Squid HTTP Caching Proxy prior to 4.0.23. An attacker could...

Linux kernel denial of service vulnerability (CNVD-2018-06306)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the blkcginitqueue function in block/blk-cgroup.c in the Linux kernel pri...