CloudBees Jenkins Mesos Plugin Access Privilege Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. It is mainly used to monitor continuous software release/testing projects and some timed tasks. Mesos Plugin is a plugin that can dynamically start Jenkins slave servers on a...

CVE-2018-16204

Cross-site scripting vulnerability in Google XML Sitemaps Version 4.0.9 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0635

Aterm HC100RC Ver1.0.1 and earlier allows attacker with administrator rights to execute arbitrary OS commands via filename parameter...

SAP Business Objects Mobile for Android Input Validation Vulnerability

SAP Business Objects Mobile for Android is an Android-based business intelligence application from SAP. The program is able to connect to the SAP BussinessObjects business intelligence platform and view data. An input validation vulnerability exists in versions of SAP Business Objects Mobile prio...

KioWare Server Elevation of Privilege Vulnerability

KioWare is a suite of self-service terminal browser software. The software has the ability to restrict end-user access to specific interfaces. A security vulnerability exists in KioWare Server 4.9.6 and prior versions. An attacker can exploit this vulnerability by replacing the KWSService service...

CUBA Platform Reporting Addon Cross-Site Scripting Vulnerability

CUBA Platform is an open source Java Web framework for enterprise applications . Reporting Addon aka Reports Addon is one of the reporting addon . A cross-site scripting vulnerability exists in Reporting Addon in CUBA Platform 6.10.x and earlier versions 2019-01-02 and earlier. A remote attacker...

Foxit Reader and PhantomPDF Null Pointer Dereference Vulnerability

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A null pointer back-reference vulnerability exists in Foxit Reader 9.3.0.10826 and earlier versions and PhantomPDF 9.3.0.10826 and...

Libsolv Illegal Address Access Vulnerability

Libsolv is a free package management library. An illegal address access vulnerability exists in the poolwhatprovides function in src/pool.h in libsolv.a in libsolv 0.7.2 and earlier. An attacker can exploit this vulnerability to cause a denial of service...

CVE-2018-18536

The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v1.07.22 and earlier expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges...

CVE-2018-0723

Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724...

PT-2018-16794 · Pandoratv · Mplayer

Name of the Vulnerable Software and Affected Versions: KMPlayer versions 4.2.2.15 and earlier Description: The issue is a Heap Based Buffer Overflow that can be exploited using a crafted FLV format file. The problem arises when more frame data is copied to heap memory than the size specified in t...

UBUNTU-CVE-2018-18352

Service works could inappropriately gain access to cross origin audio in Media in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass same origin policy for audio content via a crafted HTML page...

chromium-browser: Insufficient policy enforcement in Navigation

Lack of proper validation of ancestor frames site when sending lax cookies in Navigation in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to bypass SameSite cookie policy via a crafted HTML page...

McAfee True Key (TK) Windows Client Weak Directory Privileges Vulnerability

McAfee True Key TK is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition. A security vulnerability exists in the Microsoft Windows client in McAfee TK 5.1.230.7 and earlier versions. A...

CVE-2018-15978

Flash Player versions 31.0.0.122 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

Rapid7 Komand Information Disclosure Vulnerability

Rapid7 Komand is a suite of IT security automation solutions from Rapid7 USA. The product features task automation, malware identification, vulnerability patching and email threat identification. A security vulnerability exists in Rapid7 Komand 0.41.0 and prior versions. An attacker could exploit...

PT-2018-14975 · Tsk +1 · The Sleuth Kit +1

Name of the Vulnerable Software and Affected Versions: The Sleuth Kit TSK versions 4.6.4 and earlier Description: The issue allows attackers to cause a denial of service. It is related to the function hfs cat traverse in tsk/fs/hfs.c, which does not properly determine when a key length is too...

CVE-2018-14749

Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could have unspecified impact on the NAS...

CVE-2018-14746

Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to run arbitrary commands on the NAS...

mysql: Audit Log unspecified vulnerability (CPU Jul 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Audit Log. Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attack...