CVE-2016-4889

CVE-2016-4889 affects ManageEngine ServiceDesk Plus prior to 9.0. A vulnerability allows remote authenticated guest users to access functions that should be restricted, due to failure to enforce access controls on unknown functions. Impact is described as unspecified in some sources, but the comm...

CVE-2016-4888

CVE-2016-4888 corresponds to a cross-site scripting (XSS) vulnerability in ManageEngine ServiceDesk Plus prior to version 9.2. Documents from NVD/NVD mirrors and JVN indicate an XSS issue (CWE-79) that could allow an attacker to inject arbitrary script or HTML via unspecified vectors, potentially...

CVE-2016-4890

ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie...

ABBYY PDF Transformer+ dll Hijacking Vulnerability

ABBYY PDF Transformer+ is a pdf format converter from ABBYY. ABBYY PDF Transformer+'s Transformer.exe component has a dll hijacking vulnerability, due to insecure loading of library files, an attacker can construct a malicious application and place it in a specific path, which allows the...

HE-AAC+ Codec aacplusenc.c File Denial of Service Vulnerability

HE-AAC+ Codec aka libaacplus is a library that provides audio codecs. A security vulnerability exists in the aacplusenc.c file in HE-AAC+ Codec version 2.0.2. A remote attacker could exploit this vulnerability to cause a denial of service application crash via a specially crafted audio file...

HE-AAC+ Codec au_channel.h File Denial of Service Vulnerability

HE-AAC+ Codec aka libaacplus is a library that provides audio codecs. A security vulnerability exists in the auchannel.h file in HE-AAC+ Codec version 2.0.2. A remote attacker could exploit this vulnerability to cause a denial of service application crash via a specially crafted audio file...

CVE-2017-7604

auchannel.h in HE-AAC+ Codec aka libaacplus 2.0.2 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted audio file...

CVE-2017-7603

auchannel.h in HE-AAC+ Codec aka libaacplus 2.0.2 has a signed integer overflow, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted audio file...

PT-2017-17835 · Fraunhofer Iis · He-Aac+ Codec

Name of the Vulnerable Software and Affected Versions: HE-AAC+ Codec aka libaacplus version 2.0.2 Description: The issue is related to a left-shift undefined behavior in the au channel.h file, which could allow remote attackers to cause a denial of service, potentially leading to an application...

PT-2017-17836 · Fraunhofer Iis · He-Aac+ Codec

Name of the Vulnerable Software and Affected Versions: HE-AAC+ Codec aka libaacplus version 2.0.2 Description: The issue is related to an assertion failure in the aacplusenc.c file, which could allow remote attackers to cause a denial of service, potentially leading to an application crash, or...

Wallarm Teams up with NGINX Plus to Provide Advanced Security

Wallarm is excited to be a pioneer security vendor in NGINX Certified Module program and provide trusted and verified security functionality to NGINX Plus customers. “We are pleased to announce that Wallarm is now part of the NGINX Plus Certified Module program with the Wallarm Next Generation WA...

Huawei P9 Plus Denial of Service Vulnerability

Huawei P9 Plus is a smartphone from Huawei. The Huawei P9 Plus denial of service vulnerability is a denial of service vulnerability. Due to insufficient input validation, an attacker can trick the user into installing a malicious application, which can send specially constructed parameters to a...

CVE-2016-8768

Huawei Honor 6, Honor 6 Plus, Honor 7 phones with software versions earlier than 6.9.16 could allow attackers to disable the PXN defense mechanism by invoking related drive code to crash the system or escalate privilege...

CVE-2016-8768

Huawei PXN vulnerability CVE-2016-8768 affects Honor 6, Honor 6 Plus and Honor 7 devices with software versions prior to 6.9.16. The issue stems from drive code that can disable the PXN defense mechanism, allowing local attackers to crash the system or escalate privileges. The Huawei PSIRT adviso...

NETGEAR ProSAFE Plus Configuration Utility Incorrect Access Control Vulnerability

NetGear ProSafe is the smart switch product for monitoring and configuring your network. An incorrect access control vulnerability exists in the NETGEAR ProSAFE Plus Configuration Utility, which can be exploited by an attacker to perform switch configuration tasks based on SOAP requests...

Takipçi Şehri Plus - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Takipçi Şehri Plus published at the 'play' market has multiple vulnerabilities...

McAfee Security Scan Plus File Execution Vulnerability - Windows

McAfee Security Scan Plus is prone to file execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

McAfee Security Scan Plus Privilege Escalation Vulnerability - Windows

McAfee Security Scan Plus is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Intel Security McAfee Security Scan Plus Detection (Windows SMB Login)

SMB login-based detection of Intel Security McAfee Security Scan Plus. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-6186

Code injection vulnerability in Bitdefender Total Security 12.0 and earlier, Internet Security 12.0 and earlier, and Antivirus Plus 12.0 and earlier allows a local attacker to bypass a self-protection mechanism, inject arbitrary code, and take full control of any Bitdefender process via a...