CVE-2017-8140

The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which cou...

CVE-2017-8146

CVE-2017-8146 affects Huawei P10/P10 Plus call module. The vulnerability allows a crafted malicious app to send specific parameters to the call module, causing denial of service and crashing the call and data communication processes. Affected software versions include prior builds before VTR-AL00...

CVE-2017-2734

Huawei P9 Plus smartphones running software before VIE-AL10BC00B386 are affected by CVE-2017-2734, a DoS via a malicious app that sends crafted parameters to a specific interface, triggering excessive memory allocations and device crash. Severity is noted as high in CVSS2/3 metrics (local vs netw...

CVE-2017-8145

CVE-2017-8145 affects Huawei P10 and P10 Plus call module. The DoS condition exists in software versions before specific builds (VTR-AL00C00B167, VTR-TL00C01B167, VKY-AL00C00B167, VKY-TL00C01B167). An attacker can trick a user into installing a malicious app that sends crafted parameters to the c...

WordPress WP Support Plus Responsive Ticket System plugin <=8.0.7 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability found in WordPress WP Support Plus Responsive Ticket System plugin versions =8.0.7. Solution Update the WordPress WP Support Plus Responsive Ticket System plugin to the latest available version at least version 8.0.8...

WP Support Plus Responsive Ticket System < 8.0.8 - Remote Code Execution (RCE)

WP Support Plus Responsive Ticket System = 8.0.7 allows anyone to upload PHP files with extensions like ".phtml", ".php4", ".php5", and so on, all of which are run as if their extension was ".php" on most hosting platforms. This is because "includes/admin/attachment/uploadAttachment.php" contains...

ManageEngine ServiceDesk Plus Multiple Vulnerabilities (Nov 2017) - Active Check

ManageEngine ServiceDesk Plus is prone to multiple arbitrary file download vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

WebKit and WebKitGTK+ Remote Code Execution Vulnerability

WebKit is KDE, Apple Apple, Google Google and other companies jointly developed a set of open source Web browser engine , currently used by Apple Safari and Google Chrome and other browsers.WebKitGTK + is a multi-function port for the WebKit rendering engine . A security vulnerability exists in t...

WebKit and WebKitGTK+ Denial of Service Vulnerabilities

WebKit is KDE, Apple Apple, Google Google and other companies jointly developed a set of open source Web browser engine , currently used by Apple Safari and Google Chrome and other browsers.WebKitGTK + is a multi-function port for the WebKit rendering engine . A security vulnerability exists in t...

notepad-plus-plus.org XSS vulnerability

Open Bug Bounty ID: OBB-385810 Description| Value ---|--- Affected Website:| notepad-plus-plus.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Oracle Hyperion Unspecified Vulnerability in Oracle Hyperion BI+ Component

Oracle Hyperion is a suite of financial modeling applications from Oracle, which provides financial closure, report creation, etc. Oracle Hyperion BI+ is one of the business intelligence platform components that provides management reporting and analysis on any data source. An unspecified...

CVE-2017-10312

Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion subcomponent: UI and Visualization. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hyperion BI+. Successful...

McAfee Security Scan Plus Remote Command Execution

Vulnerability Summary The following advisory describes a Remote Command Execution found in McAfee Security Scan Plus version 3.11.587.1 McAfee Security Scan Plus is “a free diagnostic tool that ensures you are protected from threats by actively checking your computer for up-to-date anti-virus,...

37K Chrome Users Tricked into Downloading Fake Adblock Plus Extension

By Waqas For those who use Adblock Plus alongside with Google Chrome web This is a post from HackRead.com Read the original post: 37K Chrome Users Tricked into Downloading Fake Adblock Plus Extension...

Enterprise Plus license is required error on dashboards and reports

Challenge Verify health of Data Warehouse Cause Veeam MP license is synchronized to the Data Warehouse then the reports load this information. If license is invalid in the Data Warehouse due to Synchronization server having issue this error will occur Solution 1. Open SCOM Operations Manager...

Huawei Nova 2 Bastet Driver Elevation of Privilege Vulnerability

The Nova 2 and Nova 2 Plus are both smartphone devices from the Chinese company Huawei Huawei. An Use After Free UAF security vulnerability exists in the Bastet driver of the Huawei Nova 2 and Nova 2 Plus. An attacker can exploit the vulnerability for arbitrary code execution by tricking users in...

McAfee Security Scan Plus < 3.11.599.3 LiveSafe Non-certificate-based Authentication HTTP Backend-response Handling MitM Registry Value Manipulation (TS102723)

The version of McAfee Security Scan Plus installed on the remote Windows host is prior to 3.11.599.3. It is, therefore, affected by a flaw in the non-certificate-based authentication mechanism that is triggered during the handling of HTTP backend-responses. This may allow a man-in-the-middle...

CVE-2017-8688

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GD...

CVE-2017-8684

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is...

CVE-2017-8685

Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+ Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8684 and CVE-2017-8688...