PT-2017-2385

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Microsoft Office affected versions not specified Description The issue is related to improper handling of objects in memory, which can be exploited by remote attackers to execute arbitrary code and affec...

OpenLDAP ldapsearch pagesize Double Free Denial of Service (CVE-2017-9287)

A double free vulnerability exists in the ldapsearch function of OpenLDAP. The vulnerability is due to improper handling of ldapsearch queries with a pagesize of 0. A remote attacker can exploit this vulnerability by sending a crafted query to he target OpenLDAP server...

ISC BIND Referral CNAME and DNAME Assertion Failure Denial of Service (CVE-2017-3137)

A denial of service vulnerability exists in ISC BIND9. The vulnerability is due to improper handling of responses containing CNAME and DNAME records after receiving a referral. A remote attacker could exploit this vulnerability by providing two specially crafted responses to the server...

CVE-2017-5664: Improper Handling of Exceptional Conditions

The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is presented to the error page with the origin...

Quest Privilege Manager pmmasterd Buffer Overflow (CVE-2017-6553)

A Buffer Overflow vulnerability exists in Quest One Identity Privilege Manager. The vulnerability is due to improper handling requests. A remote, unauthenticated attacker could exploit this vulnerability to run arbitrary code with elevated privileges...

Arbitrary File Upload Vulnerability in inxedu Online Classroom

Incu open source online school system is developed by the Beijing Incu Times Technology Co., Ltd. launched the first Java version of the open source online school source code to build the system . inxedu online classroom there are arbitrary file upload vulnerability , the vulnerability arises...

Microsoft Windows SMBv1 Multiple Vulnerabilities

The remote Windows host has Microsoft Server Message Block 1.0 SMBv1 enabled. It is, therefore, affected by multiple vulnerabilities : - Multiple information disclosure vulnerabilities exist in Microsoft Server Message Block 1.0 SMBv1 due to improper handling of SMBv1 packets. An unauthenticated,...

WordPress REST API Posts Controller Privilege Escalation

A privilege escalation vulnerability exists in WordPress. The vulnerability is due to improper handling of post id's within the REST API posts controller. A remote, unauthenticated attacker could exploit this vulnerability by sending a crafted request to a vulnerable WordPress website...

ISC BIND DNS64 Denial of Service Vulnerability - Linux

ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...

Design/Logic Flaw

A vulnerability in the Event Management Service daemon emsd of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected device. The vulnerability is due to improper handling of gRPC requests. An attacker could exploit this...

Microsoft Windows SMB Remote Code Execution (MS17-010: CVE-2017-0148)

An information disclosure vulnerability exists in the SMBv1 component of Microsoft Windows SMB server. The vulnerability is due to improper handling of SMBv1 requests. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted SMBv1 messages to a target server...

Dovecot SASL Authentication Component Denial of Service (CVE-2016-8652)

A denial of service vulnerability exists in the SASL authentication component of Dovecot server. The vulnerability is due to improper handling of username when processing SASL authentication if auth-policy component has been activated. A remote attacker could exploit this vulnerability by sending...

Microsoft Windows COM Elevation of Privilege (CVE-2017-0213)

An elevation of privilege exists in Windows COM Aggregate Marshaler. The vulnerability is due to improper handling of certain objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges...

PT-2017-2150

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Microsoft Office Web Apps affected versions not specified Microsoft Word affected versions not specified Word Viewer affected versions not specified Microsoft SharePoint Server affected versions...

Cross-site Scripting (XSS)

github.com/koding/koding is susceptible to cross-site scripting XSS attacks. The vulnerability exists because it does not properly handle newLabel data in machine label update procedure...

KB4015383: Security Updates for the libjpeg Information Disclosure Vulnerability (April 2017)

The remote Windows host is missing security updates. It is, therefore, affected by an information disclosure vulnerability in the open-source libjpeg image processing library due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this to disclose sensitive...

Aerospike Database Server RW Fabric Message Code Execution (CVE-2016-9053)

An out-of-bounds array indexing vulnerability has been reported in Aerospike Database Server. The vulnerability is due to improper handling of a fabric message containing a request to write a record element with malicious type value. A remote attacker could exploit this vulnerability by sending a...

Zimbra < 8.7.6 Multiple Vulnerabilities

Zimbra is prone to multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

DjangoUEditor 1.9.143 arbitrary file upload vulnerability

Background improper handling, leading to arbitrary file upload. Local download the django version of ueditor, installed after a good visit: Open the upload, the capture of: Now we pass a py file, you can see is prohibited, as is the white list restrictions. But modify imagePathFormat the value to...

NTP.org 'ntpd' Multiple Denial-of-Service Vulnerabilities (Mar 2017)

NTP.org SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntp:ntp"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.810678";...