Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-05871)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability in the Server: DML subcomponent of Oracle MySQL Server 5.5.54 and earlier, 5.6.35 and earlier, and 5.7.17 and earlier c...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-05870)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: DML subcomponent of Oracle MySQL Server 5.7.17 and earlier versions, which can be exploited by an...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-05869)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: DML subcomponent of Oracle MySQL Server 5.7.17 and earlier versions, which can be exploited by an...

Microsoft .NET Framework Remote Code Execution Vulnerability (KB4014982)

This host is missing a critical security update according to Microsoft Security Update KB4014982 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

CVE-2017-0034

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability...

Remote code execution

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

Remote code execution

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

Remote code execution

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

Remote code execution

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

CVE-2017-0035

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

Windows Graphics Component Remote Code Execution Vulnerability

A remote code execution vulnerability exists due to the way the Windows Graphics Component handles objects in memory. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or creat...

Siemens SINUMERIK Integrate Operate Clients Man-in-the-Middle Security Bypass Vulnerability

Siemens SINUMERIK Integrate Operate Clients is a standard HMI system client for SINUMERIK digital controls from Siemens. A man-in-the-middle security bypass vulnerability exists in Siemens SINUMERIK Integrate Operate Clients. An attacker could use this vulnerability to conduct a man-in-the-middle...

Code injection

Siemens SINUMERIK Integrate Operate Clients between 2.0.3.00.016 including and 2.0.6 excluding and between 3.0.4.00.032 including and 3.0.6 excluding contain a vulnerability that could allow an attacker to read and manipulate data in TLS sessions while performing a man-in-the-middle MITM attack...

PT-2017-15472

Name of the Vulnerable Software and Affected Versions Siemens SINUMERIK Integrate Operate Clients versions 2.0.3.00.016 through 2.0.6 Siemens SINUMERIK Integrate Operate Clients versions 3.0.4.00.032 through 3.0.6 Description The issue allows an attacker to read and manipulate data in TLS session...

EMC Documentum Content Server DQL Injection Vulnerability

EMC Documentum Content Server is a content management service system from EMC. A DQL injection vulnerability exists in EMC Documentum Content Server because the program fails to properly filter user-submitted input. A remote attacker can exploit the vulnerability by sending a specially crafted...

GLSA-201702-08 : VirtualBox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201702-08 VirtualBox: Multiple vulnerabilities Multiple vulnerabilities have been discovered in VirtualBox. Please review the CVE identifiers referenced below for details. Impact : An attacker could cause a Denial of Service...

Ecava IntegraXor

CVSS v3 7.3 ATTENTION: Remotely Exploitable/low skill level to exploit Vendor: Ecava Equipment: IntegraXor Vulnerability: SQL Injection AFFECTED PRODUCTS The following IntegraXor version is affected: IntegraXor Version 5.0.413.0 IMPACT A successful exploit of this vulnerability could lead to...

CVE-2017-3431

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3427

Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2017-3374

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...