CVE-2018-0260

A vulnerability in the web interface of Cisco MATE Live could allow an unauthenticated, remote attacker to view and download the contents of certain web application virtual directories. The vulnerability is due to lack of proper input validation and authorization of HTTP requests. An attacker cou...

Digital Guardian Management Console 7.1.2.0015 XXE Injection Vulnerability

Exploit for asp platform in category web applications Title: Digital Guardian Managment Console - XML External Entity Vulnerability Author: Pawel Gocyla Date: 18 April 2018 CVE: CVE-2018-10175 Affected software: ================== Digital Guardian Managment Console Version 7.1.2.0015 Description:...

Multiple TIBCO Products Spring web flows Component Information Disclosure Vulnerability

TIBCO JasperReports Server and so on are the products of the United States TIBCO Software Corporation.TIBCO JasperReports Server is a report generation and editing tools for the server version , TIBCO JasperReports Server Community Edition is its community edition. Spring web flows is one of the...

CVE-2014-10055

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400 and SD 800, there could be leakage of protected contents if HLOS doesn't request for security restoration for OCMEM xPU's...

UBUNTU-CVE-2018-5430

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contain a vulnerability which...

PT-2018-3861 · Tibco +1 · Tibco Jasperreports Server +5

Name of the Vulnerable Software and Affected Versions: TIBCO JasperReports Server versions up to and including 6.4.2 TIBCO JasperReports Server Community Edition versions up to and including 6.4.2 TIBCO JasperReports Server for ActiveMatrix BPM versions up to and including 6.4.2 TIBCO Jaspersoft...

Microsoft Office Information Disclosure Vulnerability (CNVD-2018-08695)

Microsoft Office 2016 is an office software suite product developed by Microsoft USA. An information disclosure vulnerability exists in Microsoft Office 2016 that stems from the program's failure to properly disclose memory contents. An attacker can exploit the vulnerability by creating specially...

DEBIAN-CVE-2017-0359

diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...

UBUNTU-CVE-2017-0359

diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive...

CVE-2018-1007

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-0950...

EUVD-2018-11669

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-0950...

Apple iOS v11.2.6 - Camera App QR Spoofing Vulnerability

Document Title: =============== Apple iOS v11.2.6 - Camera App QR Spoofing Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2124 Video: https://www.youtube.com/watch?v=WrgUo4hWyO8 Release Date: ============= 2018-03-28 Vulnerability Laboratory ID VL-ID:...

Apple iOS v11.2.6 - Camera App QR Spoofing Vulnerability

Document Title: =============== Apple iOS v11.2.6 - Camera App QR Spoofing Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2124 Video: https://www.youtube.com/watch?v=WrgUo4hWyO8 Release Date: ============= 2018-03-27 Vulnerability Laboratory ID VL-ID:...

March 23, 2018—KB4088881 (Preview of Monthly Rollup)

None None...

CVE-2018-1000124

I Librarian I-librarian version 4.8 and earlier contains a XML External Entity XXE vulnerability in line 154 of importmetadata.phpsimplexmlloadstring that can result in an attacker reading the contents of a file and SSRF. This attack appear to be exploitable via posting xml in the Parameter...

AIX OpenSSL Advisory : openssl_advisory24.asc

The version of OpenSSL installed on the remote AIX host is affected by an off-by-one out-of-bounds read flaw in when processing X.509 certificates. This allows a context-dependent attacker to disclose limited memory contents. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Drupal Core Multiple Vulnerabilities (SA-CORE-2018-001) - Windows

Drupal is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2017-17101

An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotected CGI method inside the web application permits an unauthenticated user to bypass the login screen and access the webcam contents including: live video stream, configuration file...

Information disclosure

In XBLRamDump mode, there is a debug feature that can be used to dump memory contents, if an attacker has physical access to the device. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Androi...

CVE-2018-1000059

ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in file system...