PYSEC-2017-40

Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring...

DEBIAN-CVE-2017-14767

The sdpparsefmtpconfigh264 function in libavformat/rtpdech264.c in FFmpeg before 3.3.4 mishandles empty sprop-parameter-sets values, which allows remote attackers to cause a denial of service heap buffer overflow or possibly have unspecified other impact via a crafted sdp file...

PT-2017-12423 · Cisco · Cisco Unified Intelligence Center

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center Software affected versions not specified Description: A vulnerability in the web framework code could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of t...

CVE-2017-0720

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37430213...

Remote code execution

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36576151...

Information disclosure

A information disclosure vulnerability in the Android framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34114752...

Cisco Prime Infrastructure Cross-Site Scripting Vulnerability (CNVD-2017-13825)

Cisco Prime Infrastructure PI is a Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technology for wireless management. solution. A cross-site scripting vulnerability exists in the Web framework code in Cisco PI, which arises from the program failing to adequatel...

CVE-2017-7430

Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework...

Google Chrome Buffer Overflow Vulnerability (CNVD-2017-06701)

Google Chrome is a fast, secure and free web browser that is well suited to meet the browser requirements of new types of websites. An integer overflow vulnerability exists in FFmpeg in Google Chrome. A remote attacker can exploit this vulnerability to cause out-of-bounds memory writes with the...

CVE-2017-3877

A vulnerability in the web framework of Cisco Unified Communications Manager CallManager could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack against a user of the web interface of the affected software. More Information: CSCvb70021. Known Affected...

CVE-2017-3847

A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface. More Information: CSCvc72741. Known Affected Releases: 6.2.1...

CVE-2017-3810

A vulnerability in the web framework of Cisco Prime Service Catalog could allow an authenticated, remote attacker to conduct a web URL redirect attack against a user who is logged in to an affected system. More Information: CSCvb21745. Known Affected Releases: 10.0R2tanggula...

DEBIAN-CVE-2016-6881

The zlibrefill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause an infinite loop denial of service via a crafted SWF file...

phpok framework/model/wealth. php injection

No description provided by source...

Cisco IOS and IOS XE Cisco IOx Local Manager Cross-Site Scripting Vulnerability

Cisco IOS and IOS XE are both operating systems developed by Cisco for its network devices.Cisco IOx Local Manager is one of the local management components. A cross-site scripting vulnerability exists in the web framework in Cisco IOx Local Manager in Cisco IOS version 15.52T and IOS XE. A remot...

CVE-2016-6404

Cross-site scripting XSS vulnerability in the web framework in Cisco IOx Local Manager in IOS 15.52T and IOS XE allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuy19854...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Enterprise Manager Ops Center Component

Oracle Enterprise Manager Grid Control is a suite of systems management software from Oracle USA. The software provides centralized monitoring, lifecycle management and other functions for Oracle IT architecture. enterprise Manager Ops Center is one of the enterprise data center monitoring and...

The vulnerability in Microsoft.NET Framework software allows a malicious attacker to compromise the confidentiality of protected information.

Vulnerability exists in the Microsoft .NET Framework, and it allows attackers to circumvent the ASLR protection mechanism, which safeguards users against a wide range of vulnerabilities. Simply bypassing the protection mechanism itself does not allow the execution of arbitrary code. However,...

The vulnerability in Microsoft.NET Framework software allows a malicious attacker to compromise the confidentiality of protected information.

Vulnerability exists in the Microsoft .NET Framework, and it allows attackers to circumvent the ASLR protection mechanism, which safeguards users against a wide range of vulnerabilities. Simply bypassing the protection mechanism itself does not allow the execution of arbitrary code. However,...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Sync Framework component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially crafted data...