UBUNTU-CVE-2017-14497

The tpacketrcv function in net/packet/afpacket.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of service buffer overflow, and disk and memory corruption or possibly have unspecified other impact via crafted system calls...

CVE-2017-14497

The tpacketrcv function in net/packet/afpacket.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of service buffer overflow, and disk and memory corruption or possibly have unspecified other impact via crafted system calls...

CVE-2017-14497

The tpacketrcv function in net/packet/afpacket.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of service buffer overflow, and disk and memory corruption or possibly have unspecified other impact via crafted system calls...

SUSE-SU-2017:2446-1 Security update for Linux Kernel Live Patch 19 for SLE 12 SP1

This update for the Linux Kernel 3.12.74-606454 fixes several issues. The following security bugs were fixed: - CVE-2017-9242: The ip6appenddata function in net/ipv6/ip6output.c in the Linux kernel was too late in checking whether an overwrite of an skb data structure may occur, which allowed loc...

A vulnerability in the Linux operating system’s net/ipv4/route.c file, which allows an attacker to cause a service failure or exert other effects.

The vulnerability in the Linux operating system’s net/ipv4/route.c code is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker acting locally to trigger a service failure dereferencing the null pointer or cause other effects through system calls...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 open-tab parameter in a wpctaglobalsettings action to wp-admin/edit.php or 2 wp-cta-variation-id parameter to...

CVE-2015-8350

CVE-2015-8350 covers two XSS vulnerabilities in the WordPress plugin Calls to Action prior to 2.5.1. The flaws arise from unsanitized input in two GET parameters: open-tab (wp_cta_global_settings action, used in wp-admin/edit.php) and wp-cta-variation-id (in ab-testing-call-to-action-example/). T...

CVE-2015-8350

Multiple cross-site scripting XSS vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 open-tab parameter in a wpctaglobalsettings action to wp-admin/edit.php or 2 wp-cta-variation-id parameter to...

kernel: net: sctp_v6_create_accept_sk function mishandles inheritance

The sctpv6createacceptsk function in net/sctp/ipv6.c in the Linux kernel mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890. An unprivileged local user could use this fl...

kernel: net: tcp_v6_syn_recv_sock function mishandles inheritance

The tcpv6synrecvsock function in net/ipv6/tcpipv6.c in the Linux kernel mishandles inheritance, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls, a related issue to CVE-2017-8890. An unprivileged local user could use this fla...

kernel: net: IPv6 fragmentation implementation of nexthdr field may be associated with an invalid option

The IPv6 fragmentation implementation in the Linux kernel does not consider that the nexthdr field may be associated with an invalid option, which allows local users to cause a denial of service out-of-bounds read and BUG or possibly have unspecified other impact via crafted socket and send syste...

CVE-2017-14119

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter...

CVE-2017-14119

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter...

CVE-2017-14119

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\snmpwalk.php does not properly restrict popen calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in a parameter...

CVE-2017-14118

In the EyesOfNetwork web interface aka eonweb 5.1-0, module\toolall\tools\interface.php does not properly restrict exec calls, which allows remote attackers to execute arbitrary commands via shell metacharacters in the hostlist parameter to module/toolall/selecttool.php...

The vulnerability of the system call in the TrustZone of the Android CAF-release operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone-based system call in the Android CAF-release operating system is related to pointer swapping errors. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Android CAF-release operating system, which stems from insufficient validation of input data, allows attackers to bypass proper validation of system function arguments.

The vulnerability of the Android CAF-release operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to operate remotely without properly verifying the arguments of certain system calls of QTEE...

Brickcom IP Camera - Credentials Disclosure Vulnerability

Exploit for hardware platform in category web applications 1. Advisory Information ======================================== Title: Brickcom IP-Camera Remote Credentials and Settings Disclosure Vendor Homepage: http://www.brickcom.com Tested on Camera types: WCB-040Af, WCB-100A, WCB-100Ae, OB-302N...

CVE-2017-10951

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-13686

net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTMFFIBMATCH is set, which allows local users to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via crafted system calls. NOTE: this does not...