CVE-2017-2239

CVE-2017-2239 affects Marp v0.0.10 and earlier, where JavaScript in Markdown contents can access local resources/files due to improper access control. The JVN entry confirms impact: local files may be read and leaked. Remediation is to update to Marp v0.0.11, which restricts JavaScript from acces...

CVE-2017-10974

Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only about use of an initial /%5C sequence to defeat traversal protection mechanisms; the initial /%5C sequence was apparently not discussed in earlier research on thi...

Soffid IAM console arbitrary code execution vulnerability

Soffid IAM console is a distributed Identity Manager console program that supports SQL-based and file-based authentication for both web and natively-based applications. A security vulnerability exists in Soffid IAM console version 1.7.4 and earlier. A remote attacker can exploit the vulnerability...

Huawei OceanStor UDS Code Injection Vulnerability

Huawei OceanStor UDS is a high-density storage node and distributed storage system based on ARM architecture from Huawei, China. A security vulnerability exists in Huawei OceanStor UDS V100R002C01SPC101 and earlier versions. A remote attacker can exploit the vulnerability by injecting SHELL scrip...

Xen has multiple vulnerabilities (CNVD-2017-21732)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in t...

CVE-2017-3087

Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Captivate...

CVE-2017-1000366

glibc contains a vulnerability that allows specially crafted LDLIBRARYPATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation of stack and heap...

CVE-2017-1000373

The OpenBSD qsort function is recursive, and not randomized, an attacker can construct a pathological input array of N elements that causes qsort to deterministically recurse N/4 times. This allows attackers to consume arbitrary amounts of stack memory and manipulate stack memory to assist in...

Critical: glibc

Issue Overview: Glibc contains a vulnerability that allows specially crafted LDLIBRARYPATH values to manipulate the heap/stack, causing them to alias, potentially resulting in arbitrary code execution. Please note that additional hardening changes have been made to glibc to prevent manipulation o...

ARM Trusted Firmware Denial of Service Vulnerability

ARM Trusted Firmware is a set of interface standards that provide an ARMv8-A secure software implementation. A security vulnerability exists in ARM Trusted Firmware versions 1.3 and earlier. An attacker could exploit this vulnerability to cause a denial of service...

NetMove SaAT Personal Installer Remote Code Execution Vulnerability

NetMove SaAT Personal is a suite of products from the Japanese company NetMove that provides security protection.Installer is the installation program for it. A remote code execution vulnerability exists in NetMove SaAT Personal Installer 1.0.10.272 and earlier versions. A remote attacker could...

OpenEMR Arbitrary Code Execution Vulnerability

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An arbitrary code execution vulnerability vulnerability exists in OpenEMR...

Huawei HedEx Lite Arbitrary File Download Vulnerability

Huawei HedEx Lite is a document management software from Huawei China. An arbitrary file download vulnerability exists in Huawei HedEx Lite versions prior to V200R006C00. An attacker can exploit this vulnerability to download arbitrary files locally and disclose information...

CVE-2017-7343

An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or commands via the url parameter...

wolfSSL Denial of Service Vulnerability (CNVD-2017-09924)

wolfSSL formerly known as CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. A denial-of-service vulnerability exists in wolfSSL 3.10.2 and earlier versions. A remote attacker can exploit this vulnerability to cau...

Kodi Directory Traversal Vulnerability

Kodi is an open source media player developed by the XBMC Foundation that supports playback of most videos, music, podcasts, and a variety of common digital media files from local or networked storage devices. A directory traversal vulnerability exists in the 'Zip Extraction built-in' function in...

ytnef buffer overflow vulnerability (CNVD-2017-07744)

ytnef is an application library for extracting data from winmail.dat files. A buffer overflow vulnerability exists in the 'TNEFFillMapi' function in the lib/ytnef.c file of libytnef in ytnef 1.9.2 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service...

Linux kernel denial of service vulnerability (CNVD-2017-07507)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'sctpv6createacceptsk' function in the net/sctp/ipv6.c file in Linux kernel versions 4.11.1 and earlier, which stems from the...

MulticoreWare x265 Integer Overflow Vulnerability

MulticoreWare x265 is a HEVC encoder developed by MulticoreWare USA. An integer overflow vulnerability exists in pixel-a.asm in MulticoreWare x265 version 2.4 and earlier. An attacker can exploit this vulnerability to cause a denial of service to the encrypted process with the help of a smaller...

Invision Power Services Community Suite Cross-Site Scripting Vulnerability (CNVD-2017-06920)

Invision Power Services IPS Community Suite is an integrated application for building communities on the web. A cross-site scripting vulnerability exists in IPS Community Suite versions 4.1.19.2 and earlier. A remote attacker could exploit this vulnerability to gain access to...