LCDS LAquis SCADA Arbitrary Code Execution Vulnerability

LCDS LAquis SCADA A suite of SCADA software for monitoring and data acquisition from LCDS Brazil. A security vulnerability exists in LCDS LAquis SCADA version 4.1.0.3391 and prior versions, which arises from the program's failure to properly detect or handle abnormal conditions. An attacker could...

Ffmpeg Denial of Service Vulnerability (CNVD-2018-08525)

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. A denial of service vulnerability exists in the export function of libavfilter/vfsignature.c in Ffmpeg 3.4.2 and earlier versions. A remote attack...

CVE-2018-4084

An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Wi-Fi" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Johnathan Nightingale beep local elevation of privilege vulnerability

Johnathan Nightingale beep is an application for making sounds such as alarms. A local elevation of privilege vulnerability exists in Johnathan Nightingale beep version 1.3.4 and earlier. A local attacker can exploit this vulnerability to elevate privileges...

mysql: Server: Replication unspecified vulnerability (CPU Jan 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2018-5780

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to inject PHP code using specially crafted requests to the vnewmeeting.php page. Successful exploit could...

flash-plugin: Use After Free - remote code execution vulnerability (APSB18-05)

Adobe Flash Player versions 28.0.0.161 and earlier have an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

OSIsoft PI Data Archive Elevation of Privilege Vulnerability

OSIsoft PI Data Archive is an efficient storage and archiving component that enables high performance data retrieval through client software. An elevation of privilege vulnerability exists in OSIsoft PI Data Archive 2017 and prior versions, which can be exploited by an attacker to escalate...

UBUNTU-CVE-2018-1000079

RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a Directory Traversal vulnerability in gem installation that can result in the gem could write to...

Underbit libmad Denial of Service Vulnerability

Underbit libmad is an open source MPEG audio decoding library that provides 24-bit PCM output for platforms without floating point support. A security vulnerability exists in the 'maddecoderrun' function of the decoder.c file in Underbit libmad 0.15.1b and earlier versions. A remote attacker can...

CG-WGR1200 Buffer Overflow Vulnerability

The CG-WGR1200 is a wired LAN broadband router. A buffer overflow vulnerability exists in the firmware of CG-WGR1200 2.20 and earlier versions, which can be exploited by an attacker to execute arbitrary code on an affected device...

NVIDIA SHIELD TV NVIDIA Security Engine Information Disclosure Vulnerability

The NVIDIA SHIELD TV is a gaming console device from NVIDIA, U.S. The Security Engine is one of the... A security vulnerability exists in the RSA function of the NVIDIA Security Engine in NVIDIA SHIELD TV SE 6.2 and prior versions, which originates from the program clearing the read/write lockout...

Leptonica Arbitrary File Overwrite Vulnerability

Leptonica is an open source system for image processing and image analysis applications. A security vulnerability exists in Leptonica 1.75.3 and earlier versions. A local attacker can exploit the vulnerability to overwrite arbitrary files...

CVE-2017-12554

A remote code execution vulnerability in HPE intelligent Management Center iMC PLAT iMC Plat 7.3 E0504P2 and earlier was found...

CVE-2017-15347

Huawei Mate 9 Pro mobile phones with software of versions earlier than LON-AL00BC00B235 have a use after free UAF vulnerability. An attacker tricks a user into installing a malicious application, and the application can riggers access memory after free it. A local attacker may exploit this...

CVE-2017-9967

A security misconfiguration vulnerability exists in Schneider Electric's IGSS SCADA Software versions 12 and prior. Security configuration settings such as Address Space Layout Randomization ASLR and Data Execution prevention DEP were not properly configured resulting in weak security...

PT-2018-9212 · Git +2 · Git +2

Name of the Vulnerable Software and Affected Versions: git versions 2.15.1 and earlier Description: The issue is related to an Input Validation Error in the Client component, which can lead to problems including messing up terminal configuration and potentially allowing Remote Code Execution RCE...

CloudBees Jenkins Man-in-the-Middle Attack Vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . A...

Electrum Python Console Bitcoin Theft Vulnerability

Electrum is a lightweight bitcoin client software. python console is one of the python console programs. A security vulnerability exists in the Python console in Electrum versions 2.9.4 and earlier and versions 3.x through 3.0.5. An attacker can exploit this vulnerability to steal bitcoins with t...

php Free Chat Denial of Service Vulnerability

phpFreeChat is a free multilingual chat program based on PHP and AJAX technology. A security vulnerability exists in phpFreeChat 1.7 and earlier versions. A remote attacker can exploit this vulnerability by sending a large number of connection commands to cause a denial of service...