Linux BlueZ SDP Server Information Disclosure Vulnerability

BlueZ is an official Bluetooth stack for Linux, SDP server is one of the SDP servers. An information disclosure vulnerability exists in the Linux BlueZ SDP server. An information disclosure vulnerability exists in the SDP search attribute request processing of the SDP server in BlueZ 5.46 and...

Moxa SoftCMS Live Viewer SQL Injection Vulnerability

Moxa SoftCMS Live Viewer is a video surveillance software designed for industrial automation systems. A SQL injection vulnerability exists in Moxa SoftCMS Live Viewer 1.6 and earlier versions, which can be exploited by an attacker to access SoftCMS without knowing the user's password...

ImageMagick Denial of Service Vulnerability (CNVD-2017-24316)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'WriteTHUMBNAILImage' function in the coders/thumbnail.c file in...

RubyGems Denial of Service Vulnerability (CNVD-2017-30734)

RubyGems is a Ruby package manager from the RubyGems organization, which is used to distribute and manage Ruby packages. A security vulnerability exists in RubyGems 2.6.12 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service...

ALC WebCTRL i-Vu/SiteScan Web Path Traversal Vulnerability

ALC WebCTRL is the building automation platform. A security vulnerability exists in ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior versions that allows an authenticated user to overwrite files used to execute code...

WordPress Bridge theme cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.Bridge theme is one of the Wordpress themes. A cross-site scripting vulnerability exists in WordPress Bridge theme 11.2 an...

Adobe Digital Editions Memory Corruption Vulnerability (CNVD-2017-26431)

Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A memory corruption vulnerability exists in Adobe DE 4.5.4 and earlier versions. An attacker could exploit this...

Adobe Digital Editions Memory Corruption Vulnerability (CNVD-2017-26434)

Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A memory corruption vulnerability exists in Adobe DE 4.5.4 and earlier versions. An attacker can exploit this...

Adobe Digital Editions Memory Corruption Vulnerability (CNVD-2017-26435)

Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A memory corruption vulnerability exists in Adobe DE 4.5.4 and earlier versions. An attacker could exploit this...

Adobe Digital Editions Memory Corruption Vulnerability (CNVD-2017-26432)

Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A memory corruption vulnerability exists in Adobe DE 4.5.4 and earlier versions. An attacker can exploit this...

Adobe Experience Manager Information Disclosure Vulnerability (CNVD-2017-28751)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An...

CVE-2017-12862

In modules/imgcodecs/src/grfmtpxm.cpp, the length of buffer AutoBuffer src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

CVE-2017-11279

Adobe Digital Editions 4.5.4 and earlier has an exploitable use after free vulnerability. Successful exploitation could lead to arbitrary code execution...

UBUNTU-CVE-2017-7798

The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could allow arbitrary code execution when opening a malicious page with the style editor tool. This vulnerability affects Firefox ESR 52.3 and...

Apache Wink XML External Entity Vulnerability

Apache Wink is a U.S. Apache Apache Software Foundation for building RESTful Web services framework , which consists of a server module and the client module for the development of RESTful Web services . An XML external entity injection vulnerability exists in Apache Wink 1.1.1 and earlier...

Moxa SoftNVR-IA Live Viewer DLL Local Arbitrary Code Execution Vulnerability

Moxa SoftNVR-IA Live Viewer is a video surveillance software package developed by Moxa for industrial automation systems. A DLL local arbitrary code execution vulnerability exists in Moxa SoftNVR-IA Live Viewer 3.30.3122 and earlier versions, which stems from the program failing to properly filte...

OpenCV Denial of Service Vulnerability (CNVD-2017-24179)

OpenCV is an open source, cross-platform, lightweight computer vision library. A denial of service vulnerability exists in the 'icvCvtBGRA2BGR8uC4C3R' function in OpenCV 3.3 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service read across boundaries...

Pegasystem PEGA Platform Cross-Site Scripting Vulnerability

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. A cross-site scripting vulnerability...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-24326)

Oracle MySQL is an open source relational database management system from Oracle. A security vulnerability exists in the X Plugin subcomponent of the MySQL Server component in Oracle MySQL, version 5.7.16 and earlier. A remote attacker could exploit this vulnerability to cause a denial of service...

CVE-2017-7007

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "EventKitUI" component. It allows remote attackers to cause a denial of service resource consumption and application crash...