Default configuration

An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with malicious ones...

CVE-2017-12699

An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1. Local, non-administrative users may be able to replace or modify original application files with malicious ones...

Bitdefender Internet Security PDF Predictor Remote Code Execution Vulnerability

BitDefender Internet Security is security software that offers a wide range of protection features. Bitdefender Internet Security has a security vulnerability in pdf.xmd, which can be exploited by an attacker to execute arbitrary code in an affected application by tricking a user into browsing a...

Denial Of Service (DoS)

ImageMagick is vulnerable to denial of service DoS attacks. The attacks can be launched because the ReadOneLayer function in coders/xcf.c does not properly handle malicious files, causing memory consumption...

Design/Logic Flaw

In BlackCat CMS 1.2, remote authenticated users can upload any file via the media upload function in backend/media/ajaxupload.php, as demonstrated by a ZIP archive that contains a .php file...

CVE-2017-13670

In BlackCat CMS 1.2, remote authenticated users can upload any file via the media upload function in backend/media/ajaxupload.php, as demonstrated by a ZIP archive that contains a .php file...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25060)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial-of-service vulnerability exists in ImageMagick, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them, which can...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25054)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial-of-service vulnerability exists in ImageMagick, which allows remote attackers to exploit the vulnerability to construct malicious files and trick users into parsing them, which can...

ImageMagick Information Disclosure Vulnerability (CNVD-2017-25055)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. An information disclosure vulnerability exists in the 'ReadMATImage' function of the ImageMagick coders/mat.c file that does not properly initialize data, which allows remote attackers to...

ImageMagick Denial of Service Vulnerability (CNVD-2017-25061)

ImageMagick is the United States ImageMagick Studio company's set of open source image processing software. A denial of service vulnerability exists in the 'SFWScan' function of the ImageMagick coders/sfw.c file, which allows remote attackers to exploit the vulnerability to construct malicious...

JVN#67954465: Installer of Photo Collection PC Software provided by NTT DOCOMO, INC. may insecurely load Dynamic Link Libraries and invoke executable files

Photo Collection PC Software provided by NTT DOCOMO, INC. contains an issue with the search paths for DLL/executable files, which may lead to insecurely loading Dynamic Link Libraries and invoking executable files CWE-427. Impact This vulnerability can be exploited when the following condition is...

UnRAR Directory Traversal Vulnerability

UnRAR is a command line document decompression program for use on Windows and Linux platforms. UnRAR suffers from a directory traversal vulnerability that allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by the user and can overwrite system file...

File Inclusion Vulnerability in openSNS 5.0.0

OpenSNS is based on OneThink's lightweight social user center framework, the system adheres to a simple design style, focus on communication, providing users with a set of lightweight social solutions. A file inclusion vulnerability exists in openSNS 5.0.0. An attacker can exploit the vulnerabili...

CVE-2017-11405

In CMS Made Simple CMSMS 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/moduleinterface.php, followed by a FilePicker action to admin/moduleinterface.php in which type=image is changed to type=file...

Remote Code Execution (RCE)

Moodle is vulnerable to remote code execution RCE. A malicious user can use the portfolio API callback to upload and execute malicious files...

Zusy Malware Installs Via Mouseover – No Clicking Required

Researchers are warning of several recent spam campaigns delivering PowerPoint files that when opened contain a mouseover link that installs a variant of the Zusy malware. The malware is novel because it does not rely on macros, JavaScript or VBA macros to be enabled for the dropper file to...

PowerPoint Malicious Hover Exploit

There exists a malicious downloader vulnerability in Microsoft Office PowerPoint. This is because of the way PowerPoint presentation format handles link hover. A successful attack could lead to malicious files being downloaded...

Arbitrary File Write Vulnerability in HelpEditer.aspx File of MicroXia Online Learning Platform

Micro Xia Online Learning Platform is an online education system based on B/S architecture. A write shell vulnerability exists in the 'HelpEditer.aspx' file of MicroXia Online Learning Platform. It allows remote attackers to gain server privileges by constructing a malicious data stream to write ...

Google Android Mediasever Denial of Service Vulnerability (CNVD-2017-07546)

Google Android is a Linux-based operating system for smartphone devices. A denial of service vulnerability exists in Google Android Mediasever, which can be exploited by remote attackers to construct malicious files that can be parsed by the user, which can crash the application...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2017-07547)

Google Android is a Linux-based operating system for smartphone devices. A denial of service vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to construct malicious files and trick users into parsing them, which can crash the system...