CVE-2017-2324

A command injection vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a network-based malicious attacker to cause a denial of service condition...

Mozilla: Use-after-free during transaction processing in the editor (MFSA 2017-11, MFSA 2017-12)

A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

IBM Cognos TM1 Information Disclosure Vulnerability

IBM Cognos TM1 is a suite of enterprise planning software for planning, budgeting, forecasting and analyzing from IBM in the United States. The software quickly analyzes data, models business needs, and collaborates on plans, budgets, and forecasts. A security vulnerability exists in IBM Cognos T...

CVE-2016-3036

IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets. A remote attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 114612...

Foxit PDF Toolkit Memory Corruption Vulnerability (CNVD-2017-05242)

Foxit PDF Toolkit is China's Foxit Foxit Software Corporation's set of all-in-one PDF converter toolkit. A memory corruption vulnerability exists in versions of Foxit PDF Toolkit prior to 2.1. A remote attacker could exploit this vulnerability with a specially crafted PDF file to cause a denial o...

CVE-2017-0548

A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33251605...

Novell eDirectory Security Bypass Vulnerability

Novell eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from Novell, USA. The platform provides authentication policies, data backup and recovery services, data disaster recovery and other functions. A...

IBM PowerKVM Local Command Execution Vulnerability

IBM PowerKVM is a set of open virtualization solutions from the U.S. company IBM designed for the Power extension function of Linux servers based on POWER8 technology. The solution supports the sharing of physical computer memory and I/O resources, etc. through server virtualization. A local...

CVE-2017-3866

A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873...

SQL Injection Vulnerability in cid and keyword parameters of KenCMS V1.1 Enterprise Membership Experience Edition System

KenCMS is a content management system. A SQL injection vulnerability exists in the KenCMS V1.1 Enterprise Member Experience system. The lack of filtering of the 'cid' and 'keyword' parameters allows an attacker to exploit the vulnerability to obtain sensitive information from the database...

IBM PowerKVM Command Execution Vulnerability

IBM PowerKVM is a set of open virtualization solutions from the U.S. company IBM designed for the Power extension function of Linux servers based on POWER8 technology. The solution supports the sharing of physical computer memory and I/O resources, etc. through server virtualization. A command...

DEBIAN-CVE-2016-7587

An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2016-4666

An issue was discovered in certain Apple products. iOS before 10.1 is affected. Safari before 10.0.1 is affected. tvOS before 10.0.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and...

CVE-2017-0419

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2016-1894

NetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass authentication via unspecified vectors...

CVE-2017-3373

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-3392

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

Advantech WebAccess Security Bypass Vulnerability

Advantech WebAccess formerly known as BroadWinWebAccess is a set of HMI/SCADA software based on browser architecture from Advantech. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A securit...

RDS redirected resources showing degraded performance in Windows 8.1 or Windows Server 2012 R2

RDS redirected resources showing degraded performance in Windows 8.1 or Windows Server 2012 R2 This article describes an issue that occurs on a Remote Desktop Session host that‘s running Windows 8.1 or Windows Server 2012 R2. You can fix this issue by using the update in this article. Before you...

Dell SonicWALL Global Management System GMS SQL Injection Vulnerability

Dell SonicWALL Global Management System is a tool for managing Dell SonicWALL from Dell, USA. A SQL injection vulnerability exists in Dell SonicWALL Global Management System GMS version 8.1. The vulnerability allows an attacker to take control of the application, access or modify data, or exploit...