UBUNTU-CVE-2018-3171

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Partition. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

SQL Injection Vulnerability in UsualToolCMS v8.0Release

UsualToolCMS UTCMS is an enterprise-level web content management system written in PHP+MYSQL that uses template separation technology to support the creation of multiple types of sites. UsualToolCMS v8.0Release suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability ...

CVE-2018-8532

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio SSMS when parsing a malicious XMLA file containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, S...

Microsoft SQL Server Management Studio Information Disclosure Vulnerability

Microsoft SQL Server Management Studio is an integrated environment for managing multiple SQL infrastructures from Microsoft. The product is mainly used for setting up, monitoring and managing SQL programs. An information disclosure vulnerability exists in Microsoft SQL Server Management Studio...

PT-2018-16355 · Acd Systems · Canvas Draw

Name of the Vulnerable Software and Affected Versions: Canvas Draw version 5.0.0 Description: An exploitable out-of-bounds write exists in the TIFF-parsing functionality. An attacker can deliver a TIFF image to trigger this issue and gain code execution. Recommendations: For version 5.0.0, update...

CVE-2018-7109

HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager eIUM v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM...

jhead denial of service vulnerability (CNVD-2018-19092)

jhead is a tool for modifying JPEG file information. A denial of service vulnerability exists in the 'ProcessGpsInfo' function of the gpsinfo.c file in jhead version 3.00, which can be exploited by remote attackers to cause a denial of service with the help of a malicious JPEG file...

JDK: DoS in the java.math component

A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681...

ALPINE-CVE-2018-17082

The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "Transfer-Encoding: chunked" request, because the bucket brigade is mishandled in the phphandler function in sapi/apache2handler/sapiapache2.c...

TP-Link TL-WR886N Denial of Service Vulnerability (CNVD-2019-07049)

The TP-Link TL-WR886N is a wireless router product from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WR886N version 6.0 2.3.4 and 7.0 1.1.0. An attacker can exploit the vulnerability by sending a request with long JSON data to cause the router service to crash...

TP-Link TL-WR886N Denial of Service Vulnerability (CNVD-2019-07045)

The TP-Link TL-WR886N is a wireless router product from China P&L TP-LINK. A security vulnerability exists in TP-Link TL-WR886N version 6.0 2.3.4 and 7.0 1.1.0. An attacker can exploit the vulnerability by sending a request with long JSON data to cause the router service to crash...

WordPress plugin Quizlord cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Quizlord plugin is used in one of the plugin in the site to add testing capabilities. A cross-site scripting...

CVE-2018-12807

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have an input validation bypass vulnerability. Successful exploitation could lead to unauthorized information modification...

JDK: DoS in the java.math component

A flaw in the java.math component in IBM SDK, Java Technology Edition 6.0, 7.0, and 8.0 may allow an attacker to inflict a denial-of-service attack with specially crafted String data. IBM X-Force ID: 141681...

Apache mod_perl Code Execution Vulnerability

Apache HTTP Server is the United States Apache Apache Software Foundation of an open source web server. modperl is an embedded Perl compiler Apache HTTP Server . A security vulnerability exists in Apache modperl versions 2.0 through 2.0.10. The vulnerability can be exploited to execute arbitrary...

Red Hat Libvirt Denial of Service Vulnerability (CNVD-2018-16495)

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A security vulnerability exists in Red Hat Libvirt versions...

Arbitrary File Deletion Vulnerability in LibreHealthIO LH-EHR

LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. An arbitrary file deletion vulnerability exists in the export template in the LibreHealthIO LH-EHR REL-2.0.0 release. An attacker can exploit this vulnerability to cause a denial of servic...

CVE-2018-2442

In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid...

PHP Scripts Mall Chartered Accountant:Auditor Website Cross-Site Request Forgery Vulnerability

PHP Scripts Mall Chartered Accountant:Auditor Website is a financial auditing website system script by PHP Scripts Mall India. The system includes features such as profile management, feedback management, order management and document upload management. A cross-site request forgery vulnerability...

PHP Scripts Mall hotel-booking-script Denial of Service Vulnerability

PHP Scripts Mall hotel-booking-script is a hotel booking system script by PHP Scripts Mall India, which includes features like advanced CMS management, review management and booking management. A denial of service vulnerability exists in PHP Scripts Mall hotel-booking-script version 2.0.4, which...