CVE-2018-6786

CVE-2018-6786 concerns Jiangmin Antivirus 16.0.0.100, where the driver KVFG.sys does not validate input values sent to IOCTL 0x220840. Local attackers can trigger a denial of service (BSOD) and potentially other impact, as described in multiple sources. The public documents specify the vulnerable...

PacketFence Bypass Authentication Vulnerability

PacketFence is an open source network access control solution. A security vulnerability exists in the 'checkpassword' function in the html/admin/login.php file in versions prior to PacketFence 3.0.2. A remote attacker can exploit this vulnerability to bypass authentication with the help of an emp...

DEBIAN-CVE-2018-6536

An issue was discovered in Icinga 2.x through 2.8.1. The daemon creates an icinga2.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for icinga2.pid modification before a root script...

CVE-2018-6541

CVE-2018-6541 : In ZZIPlib 0.13.67, a bus error caused by loading a misaligned address in __zzip_fetch_disk_trailer (zzip/zip.c) can be triggered by a crafted zip file, enabling a remote DoS. Connected advisories confirm fixes across multiple distros (e.g., Debian, Fedora, CentOS, Amazon Linux 2)...

CVE-2018-6524

The CVE-2018-6524 issue affects nProtect AVS V4.0 (before 4.0.0.39). The vulnerable component is the kernel driver TKFsAv.SYS, where input values from IOCTL 0x220c20 are not validated. This can let a local attacker cause a denial of service (blue screen) and potentially other impact. Mitigation i...

CVE-2018-6472

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40204c...

UBUNTU-CVE-2017-12378

ClamAV AntiVirus software versions 0.99.2 and prior contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper input validation checking mechanisms of .tar Tape Archive files...

libming integer overflow vulnerability (CNVD-2018-03001)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. An integer overflow vulnerability exists in the 'outputSWFTEXTRECORD' function in the util/outputscript.c file in libming 0.4.8 and earlier...

CVE-2018-6205

In Max Secure Anti Virus 19.0.3.019,, the driver file MaxProtector32.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220009...

Artifex MuPDF pdf/pdf-write.c File Denial of Service Vulnerability

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in the pdf/pdf-write.c file in Artifex MuPDF versions prior to 1.12.0, which stems from the program's failure to properly handle length variations. A remote attacker can exploit this vulnerabili...

SQL injection vulnerability in the api.class.php page of UQCMS Cloud Business B2B2C Multi-store System

UQCMS cloud business system is a B2B2C e-commerce software with the program using PHP+MYSQL and the template using smarty template. A SQL injection vulnerability exists in the api.class.php page of the UQCMS Cloud Business B2B2C Multi-Store System due to the program's failure to adequately filter...

Heap overflow

WritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service bitstream.c MagickBitStreamMSBWrite heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted file...

Debian DLA-1201-1 : libxcursor security update

It was discovered that libXcursor, a X cursor management library, is prone to several heap overflows when parsing malicious files. An attacker can take advantage of these flaws for arbitrary code execution, if a user is tricked into processing a specially crafted cursor file. For Debian 7 'Wheezy...

CVE-2017-17102

Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $REQUEST'link'...

CVE-2017-2919

An exploitable stack based buffer overflow vulnerability exists in the xlsgetfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability...

CVE-2017-1000199

tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handlerqcow.so resulting in non-privileged users being able to check for existence of any file with root privileges...

UBUNTU-CVE-2017-16832

The pebfdreadbuildid function in peicode.h in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service segmentation violation and applicatio...

DEBIAN-CVE-2017-16832

The pebfdreadbuildid function in peicode.h in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service segmentation violation and applicatio...

Code execution vulnerability in Axublog ad/theme.php file

Axublog is a PHP personal blog system. A code execution vulnerability exists in the Axublog ad/theme.php file. The vulnerability is due to the program failing to filter the parameters passed, an attacker can exploit the vulnerability to construct a specially crafted file, upload a shell, and obta...

SQL injection vulnerability in EML enterprise address book management system action.address.php file

EML enterprise customer relationship management system is based on Linux open kernel and Apache based Php + Mysql intelligent B / S interactive service system. A SQL injection vulnerability exists in the EML Enterprise Contacts Management System action.address.php file. An attacker can exploit th...