NetEx HyperIP Privilege Escalation Vulnerability

Vulnerability Details Affected Vendor: NetEx Affected Product: HyperIP Affected Version: 6.1.0 Platform: Embedded Linux CWE Classification: CWE-592: Authentication Bypass Issues Impact: Privilege Escalation Attack vector: HTTPS 2. Vulnerability Description Privileges can be escalated by abusing...

PT-2017-3249

Name of the Vulnerable Software and Affected Versions Systems with microprocessors affected versions not specified Description The issue is related to speculative execution and indirect branch prediction in microprocessors, which may allow unauthorized disclosure of information to an attacker wit...

Dell Active Roles 7.x Unquoted Service Path Privilege Escalation Vulnerability

Dell Active Roles versions 7.1, 7.0.4, 7.0.3, 7.0.2, and 7.0 suffer from an unquoted service path privilege escalation vulnerability. Exploit Title: Dell Active Roles Unquoted Service Path Privilege Escalation Date: 16/06/2017 Exploit Author: SlidingWindow , Twitter: @KapilKhot Vendor Homepage:...

Cross-site Scripting (XSS)

Overview erubis is an implementation of eRuby and has the following features: Affected versions of the package are vulnerable to Cross-site Scripting XSS. Single quotes were not properly escaped in the helper.rb and helpers/railshelper.rb files. The Erubis Documentation shows missing escaping...

PT-2017-5876 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman versions prior to 1.5.2 Description: The issue allows remote authenticated users to inject arbitrary web script or HTML via the operating system 1 name or 2 description. Recommendations: For versions prior to 1.5.2, update to version...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. In Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after a repeating series of Gfx::display, Gfx::go, Gfx::execOp, Gfx::opShowText, and Gfx::doShowText calls aka a Gfx.cc infinite...

CVE-2017-5247

Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An authenticated user with permissions to upload or send files can populate this field with a filename that contains standard HTML scripting tags. The resulting script will evaluated by any other authenticat...

PT-2017-11665 · Ibm · Ibm Jazz Foundation

Name of the Vulnerable Software and Affected Versions: IBM Jazz Foundation affected versions not specified Description: The issue could expose potentially sensitive information to authenticated users through stack trace error conditions. Recommendations: At the moment, there is no information abo...

Confluence 6.0.x Information Disclosure Vulnerability

The Confluence drafts diff rest resource made the current content of all blogs and pages in Confluence available without authentication. Attackers who can access the Confluence web interface of a vulnerable version can use this vulnerability to obtain the content of all blogs and pages inside...

RHEL 6 : kernel-rt (RHSA-2017:0932)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0932 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

PT-2016-2989 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing a remote attacker to potentially execute arbitrary code or cause a denial of service memory corruption...

PT-2016-2772 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code or cause a denial of service memory corruption using unknown vectors...

PT-2016-5878 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue is related to a problem in Adobe Flash Player. No specific details about the number of potentially affected devices or real-world incidents are provided. Recommendation...

PT-2016-7355 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue is related to an off-by-one error in the magick/cache.c file of ImageMagick, which allows remote attackers to cause a denial of service, resulting in a segmentation fault. The...

PT-2017-6398 · Imagemagick +1 · Imagemagick +1

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: A heap-based buffer overflow issue in ImageMagick allows remote attackers to have an unspecified impact via a crafted psd file. Recommendations: At the moment, there is no information...

MGASA-2016-0024 Updated php packages fix security vulnerability

The php package has been updated to version 5.6.17, which fixes several security issues and other bugs. See the upstream ChangeLog for more details...

PT-2015-2847 · Adobe +3 · Integrated Runtime +4

Name of the Vulnerable Software and Affected Versions: Adobe Integrated Runtime and Flash Player affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: ...

PT-2015-2814 · Adobe +3 · Integrated Runtime +4

Name of the Vulnerable Software and Affected Versions: Adobe Integrated Runtime and Flash Player affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: ...

PT-2015-2850 · Adobe +3 · Integrated Runtime +4

Name of the Vulnerable Software and Affected Versions: Adobe Integrated Runtime and Flash Player affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: ...

PT-2015-2923 · Adobe +3 · Flash +5

Name of the Vulnerable Software and Affected Versions: Adobe Flash affected versions not specified Description: The issue is related to the implementation of the TextField object in Flash Player and Adobe Integrated Runtime, specifically concerning the use of memory after it has been freed. This...