3044 matches found
DEBIAN-CVE-2018-9988
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in sslparseserverkeyexchange that could cause a crash on invalid input...
Apple iOS, Safari and tvOS JavaScriptCore Cross-Site Scripting Vulnerability
Apple iOS, Safari, and tvOS are all products of Apple Inc. Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems; iOS is a set of operating systems developed for mobile devices; and tvOS is a set of operating systems for smart TVs...
UBUNTU-CVE-2018-4146
An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The issue involves the "WebKit"...
Open-AudIT Professional Open Redirect Vulnerability
Open-AudIT Professional is a network discovery and auditing program. The program intelligently scans networks and network devices and provides status reports. A security vulnerability exists in Open-AudIT Professional version 2.1. An attacker can exploit the vulnerability by sending the...
Open-AudIT Cross-Site Request Forgery Vulnerability
Open-AudIT Professional is a network discovery and auditing program. The program intelligently scans networks and network devices and provides status reports. A cross-site request forgery vulnerability exists in Open-AudIT Professional version 2.1. A remote attacker can exploit this vulnerability...
CVE-2018-8979
Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI...
NetIQ eDirectory Denial of Service Vulnerability
NetIQ eDirectory is an identity management infrastructure platform that combines identity management architecture and directory service technology. The platform provides authentication policies, data backup and recovery services, data disaster recovery and other functions. A security vulnerabilit...
CVE-2018-1346
Addresses denial of service attack to eDirectory versions prior to 9.1...
TrueCrypt Integer Overflow Vulnerability
TrueCrypt is an open source virtual encryption disk encryption software that creates virtual disks on your hard drive without generating any files. An integer overflow vulnerability exists in TrueCrypt version 7.1a. A local attacker can exploit this vulnerability to obtain sensitive information o...
Arbitrary File Editing Vulnerability in KingCMS v6.1.1641_Sp2
KingCMS is a content management system based on WEB technology. KingCMS v6.1.1641Sp2 has an arbitrary file editing vulnerability. The vulnerability stems from not filtering the path of the file to be modified and the content of the file to be written, which can be exploited by an attacker to edit...
NetIQ Sentinel Information Disclosure Vulnerability (CNVD-2018-06631)
NetIQ Sentinel is a security information and event management SIEM solution from US-based NetIQ. The solution collects, stores and analyzes log data and reports on it, as well as analyzing security event data in real time. A security vulnerability exists in NetIQ Sentinel versions prior to 8.1.x...
Amazon Music Player Remote Code Execution Vulnerability
Amazon Music Player is a music player from Amazon USA. A security vulnerability exists in the handling of URI handlers in Amazon Music Player version 6.1.5.1213, which stems from the program not validating user-submitted strings. The vulnerability can be exploited to execute code by tricking a us...
Tiki CSV Injection Vulnerability
Tiki is a suite of open source content management and portal applications from the Tiki software community that can be used to create Web applications, portals, corporate intranets, extranets, and more. A security vulnerability exists in Tiki version 17.1 that stems from the program's failure to...
IBM Security Guardium Database Activity Monitor Authorization Vulnerability
IBM Security Guardium Database Activity Monitor is a database activity monitor product from IBM USA. The product provides features such as automated controls for compliance and protection against internal and external threats. An authorization vulnerability exists in IBM Security Guardium Databas...
Android Framework (crypto framework) information disclosure vulnerability
Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Framework crypto-framework is one of the cryptographic frameworks. Framework crypto framework is one of the cryptographic...
CVE-2018-1417
Under certain circumstances, a flaw in the J9 JVM IBM SDK, Java Technology Edition 7.1 and 8.0 allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823...
CVE-2017-8948
A Remote Bypass Security Restriction vulnerability in HPE Network Node Manager i NNMi Software versions v10.0x, v10.1x, v10.2x was found...
Progress Sitefinity Open Redirect Vulnerability
Progress Sitefinity is an open source platform for building corporate websites and intranets. An open redirect vulnerability exists in Authenticate/SWT in Progress Sitefinity version 9.1. An attacker can exploit this vulnerability to redirect users to arbitrary websites...
Progress Sitefinity Cross-Site Scripting Vulnerability (CNVD-2018-05678)
Progress Sitefinity is an open source platform for building corporate websites and intranets. A cross-site scripting vulnerability exists in Progress Sitefinity version 9.1. A remote attacker could exploit this vulnerability to access arbitrary information and functionality...