CVE-2017-11300

An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses...

CVE-2017-11302

An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11281

Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier...

PT-2017-4252

Name of the Vulnerable Software and Affected Versions Cisco Umbrella Virtual Appliance versions prior to 2.1.0 Cisco Umbrella affected versions not specified Description The issue is related to errors in resource release in the web interface of the Cisco Umbrella security service. Exploitation of...

Xen Denial of Service Vulnerability (CNVD-2017-38298)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in X...

OpenEMR Elevation of Privilege Vulnerability

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An elevation of privilege vulnerability exists in OpenEMR 5.0.1-dev and...

CVE-2017-2738

VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. This is due to improper implementation of authentication for accessing web pages. An unauthenticated attacker could bypass the authentication by sending a crafted HTTP request. 5010 with...

Cross site scripting

HedEx Earlier than V200R006C00 versions have the stored cross-site scripting XSS vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users...

Fortinet FortiOS Information Disclosure Vulnerability (CNVD-2017-37067)

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. An information...

OwlMixin Command Execution Vulnerability

OwlMixin is a Python based tool that can convert data class instances, dict objects, json strings and yaml strings to each other . A security vulnerability exists in the YAML loading feature of the util.py file in OwlMixin versions prior to 2.0.0a12. An attacker can exploit this vulnerability by...

ArGoSoft Mini Mail Server Denial of Service Vulnerability

ArGoSoft Mini Mail Server is a full-featured mail server for Windows platform that supports POP3/SMTP/FINGER protocols. A denial of service vulnerability exists in ArGoSoft Mini Mail Server 1.0.0.2 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service...

GHSA-CFJH-P3G4-3Q2F VBScript Content Injection in marked

Versions 0.3.2 and earlier of marked are affected by a cross-site scripting vulnerability even when sanitize:true is set. Proof of Concept IE10 Compatibility Mode Only xss link will get a link xss link Recommendation Update to version 0.3.3 or later...

PT-2017-4213 · Apache +4 · Apache Portable Runtime +4

Name of the Vulnerable Software and Affected Versions: Apache Portable Runtime APR versions 1.6.2 and prior Description: The issue is related to the apr time exp and apr os exp time functions in the Apache Portable Runtime APR. When these functions are invoked with an invalid month field value, o...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-32200)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the Server: Optimizer subcomponent of the...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-32204)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the Server: FTS subcomponent of the MySQL...

Oracle MySQL Server Unauthorized Operation Vulnerability (CNVD-2017-32211)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the Server: InnoDB subcomponent of the MySQ...

Ipswitch IMail Server Buffer Overflow Vulnerability (CNVD-2017-32277)

Ipswitch IMail Server is a mail server from Ipswitch, Inc. that runs on the Microsoft Windows operating system. A stack buffer overflow vulnerability exists in Ipswitch IMail server version 12.5.5 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary code...

UBUNTU-CVE-2017-10286

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: InnoDB. Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

Opentext Documentum Content Server elevation of privilege vulnerability (CNVD-2017-30838)

OpenText Documentum Content Server formerly known as EMC Documentum Content Server is a content management service system from OpenText Canada. The system is mainly used to manage the Documentum content repository, you can create, modify and track documents and other operations. An elevation of...

AlienVault USM Cross-Site Request Forgery Vulnerability

AlienVault USM is a set of security management platforms from AlienVault USA. The platform provides security monitoring, security event management and reporting, threat awareness system and other functions. A cross-site request forgery vulnerability exists in AlienVault USM 5.4.2 and earlier...