Red Hat keycloak infinite loop vulnerability

Red Hat keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. An infinite loop vulnerability exists in session replacement in Red Hat Keycloak versions prior to 4.0.0.final, which stems from the failure of...

Suricata Security Bypass Vulnerability

Suricata is a set of network intrusion detection system IDS, intrusion prevention system IPS and network security monitoring engine developed by the Open Information Security Foundation OISF and its supported vendors, which supports multi-threading, built-in IPv6, and the ability to load...

Apple iOS, tvOS and watchOS Kernel Local Information Disclosure Vulnerability

Apple iOS, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. kernel is one of the kernel components. A security vulnerability exists in the Kernel componen...

AZL-44094 CVE-2018-14042 affecting package python-openstackdocstheme 3.0.0-9

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...

CVE-2018-0042

Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an information disclosure vulnerability...

SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure and SoftControl/SafenSoft Enterprise Suite Security Bypass Vulnerability

SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise Suite are Russian SAFE'N'SEC's proactive defense-capable malware applications. A security vulnerability exists in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft...

PT-2018-11456 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen versions prior to 4.11 Description: An issue in Xen allows a malicious PV guest to crash the system, leading to a Denial of Service. The vulnerability can be triggered by a guest and is caused by an oversight in safety checks added to...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15633)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Storage Group" method in Quest DR Series Disk Backup Software before 4.0.3.1. The vulnerability can be exploited to execute system commands via the 'name' parameter...

CVE-2018-11192

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 4 of 6...

CVE-2018-11172

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 30 of 46...

PHP Login & User Management Code Execution Vulnerability

PHP Login & User Management is a set of PHP and MySQL based website user login and registration management script. An arbitrary file upload vulnerability exists in the /classes/profile.class.php file in versions of PHP Login & User Management prior to 4.1.1. A remote attacker can exploit this...

Linux kernel information disclosure vulnerability (CNVD-2018-10857)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'compatgettimex' function in the kernel/compat.c file in Linux kernel versions prior to 4.16.9. A local attacker can exploit thi...

JFrog Artifactory Arbitrary File Upload Vulnerability

JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog that supports clustering and high-availability Docker registries and provides an end-to-end automation solution for tracking artifacts from development to production. An arbitrary file upload...

Linux kernel vhost 'vhost/vhost.c:vhost_new_msg()' function denial of service vulnerability

The Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. vhost is one of the drivers that provides kernel virtio device emulation. A security vulnerability exists in the 'vhost/vhost.c:vhostnewmsg' function of vhost in...

CVE-2018-9118

exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename parameter...

tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser

The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...

tcpdump: Buffer over-read in print-mobility.c:mobility_print() in IPv6 mobility parser

The IPv6 mobility parser in tcpdump before 4.9.2 has a buffer over-read in print-mobility.c:mobilityprint...

tcpdump: Buffer over-read in print-pktap.c:pktap_if_print() in Apple PKTAP parser

The Apple PKTAP parser in tcpdump before 4.9.2 has a buffer over-read in print-pktap.c:pktapifprint...

PT-2018-9618 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.16 Description: The issue allows local users to cause a denial of service ata qc leak by triggering certain failure conditions, specifically when physically proximate attackers unplug SAS Host Bus Adapter...

McAfee True Key DLL Sideload Vulnerability

McAfee True Key is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A security vulnerability exists in McAfee True Key versions prior to 4.20.110, which stems from the program's failur...