KLA11186 Multiple vulnerabilities in Mozilla Thunderbird

Multiple serious vulnerabilities have been found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface and execute arbitrary code. Below is a complete list of vulnerabilities: 1. Multiple use-after-free vulnerabilities can be...

Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2018-02634)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A buffer overflow vulnerability exists in previous versions of Mozilla Firefox 58. An attacker could exploit this vulnerability to cause a denial of service crash...

Artifex MuJS Denial of Service Vulnerability

Artifex MuJS is a lightweight JavaScript interpreter from Artifex Software, which is used to embed into other software to provide script execution. A security vulnerability exists in the jsparse.c file in Artifex MuJS 1.0.2 and earlier versions, which stems from the program failing to properly...

CentOS Web Panel Cross-Site Scripting Vulnerability (CNVD-2018-03251)

CentOS Web Panel is a CentOS Lnuix system administration panel. A cross-site scripting vulnerability exists in CentOS Web Panel 0.9.8.12 and earlier versions. A remote attacker can exploit this vulnerability by injecting script code into a client browser via the 'module' value of the index.php fi...

Nootka Command Injection Vulnerability

Nootka is a mobile application for learning classical music notation. A security vulnerability exists in Nootka 1.4.4 and earlier versions. A remote attacker can exploit the vulnerability to execute arbitrary operating system commands...

UBUNTU-CVE-2018-2600

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

UBUNTU-CVE-2018-2667

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

UBUNTU-CVE-2018-1000004

In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition...

CVE-2017-16720

A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within the directory structure of the target device...

PT-2017-15100 · Ruby +1 · Ruby On Rails +1

Name of the Vulnerable Software and Affected Versions: Ruby on Rails versions 5.1.4 and earlier Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the name parameter in the 'reorder' method. It's worth noting that the vendor disputes...

Mozilla Thunderbird Address Forgery Vulnerability

Mozilla Thunderbird is the United States Mozilla Foundation developed from the Mozilla Application Suite independent of the e-mail client software, support for IMAP, POP mail protocol and HTML mail format. An address forgery vulnerability exists in versions of Mozilla Thunderbird prior to 52.5.2...

CVE-2017-11302

An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to arbitrary code execution...

CVE-2017-11300

An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclosure of memory addresses...

CVE-2017-11281

Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to arbitrary code execution. This affects 26.0.0.151 and earlier...

PT-2017-4252

Name of the Vulnerable Software and Affected Versions Cisco Umbrella Virtual Appliance versions prior to 2.1.0 Cisco Umbrella affected versions not specified Description The issue is related to errors in resource release in the web interface of the Cisco Umbrella security service. Exploitation of...

Xen Denial of Service Vulnerability (CNVD-2017-38298)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in X...

OpenEMR Elevation of Privilege Vulnerability

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An elevation of privilege vulnerability exists in OpenEMR 5.0.1-dev and...

CVE-2017-2738

VCM5010 with software versions earlier before V100R002C50SPC100 has an authentication bypass vulnerability. This is due to improper implementation of authentication for accessing web pages. An unauthenticated attacker could bypass the authentication by sending a crafted HTTP request. 5010 with...

Cross site scripting

HedEx Earlier than V200R006C00 versions have the stored cross-site scripting XSS vulnerability. Attackers can exploit the vulnerability to plant malicious scripts into the configuration file to interrupt the services of legitimate users...

Fortinet FortiOS Information Disclosure Vulnerability (CNVD-2017-37067)

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. An information...