Trend Micro Control Manager cmdHandlerTVCSCommander.dll File SQL Injection Vulnerability

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. A SQL injection vulnerability exists in TMCM version 6.0, which stems from the cmdHandlerTVCSCommander.dll file failing to adequately validate user input. A remote...

ImageMagick 'ReadMATImage' function memory leak vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. The coders/mat.c file in ImageMagick versions 6.9.9-3 and earlier and versions 7.x through 7.0.6-3 has a A memory leak...

IBM iNotes Cross-Site Scripting Vulnerability (CNVD-2017-21250)

IBM iNotes also known as IBM Lotus iNotes is a set of Web-based e-mail software from IBM in the United States. The software helps different types of users online and offline users to effectively manage business-critical information and collaboration. A cross-site scripting vulnerability exists in...

VMware vCenter Server Elevation of Privilege Vulnerability

VMware vCenter Server is a suite of server and virtualization management software from VMware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. A security vulnerability exists in VMware...

OpenProject Session Hijacking Vulnerability

OpenProject is an open source Web-based project management software . The software has project planning , task management , bug tracking and cost budgeting and other functions . A session hijacking vulnerability exists in OpenProject versions prior to 6.1.6 and 7.x versions prior to 7.0.3, which...

ALPINE-CVE-2017-11625

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDF::resolveObjectsInStream function in QPDF.cc, aka an "infinite loop."...

ALPINE-CVE-2017-11624

A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after two consecutive calls to QPDFObjectHandle::parseInternal, aka an "infinite...

CVE-2017-11566

AppUse 4.0 allows shell command injection via a proxy field...

ALPINE-CVE-2017-11408

In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/packet-amqp.c by checking for successful list dissection...

FreeRADIUS Denial of Service Vulnerability (CNVD-2017-16975)

FreeRADIUS is a set of software that implements the RADIUS protocol from the FreeRADIUS Server project. The software is mainly used for account authentication management, bookkeeping management and Internet account management, etc. and contains a Radius server, a client library for BSD protocol...

CVE-2017-2253

Untrusted search path vulnerability in Installer of Yahoo! Toolbar for Internet explorer v8.0.0.6 and earlier, with its timestamp prior to June 13, 2017, 18:18:55 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

UBUNTU-CVE-2016-10397

In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:[email protected]/ and evil.example.com:[email protected]/ inputs to the parseurl...

Cisco Ultra Services Framework Unauthorized Access Vulnerability

Cisco Ultra Services Framework is an intelligent online service delivery platform from Cisco.Ultra Automation Service is one of the automation services. A security vulnerability exists in Cisco Ultra Services Framework for UAS versions prior to 5.0.3 and prior to 5.1. A remote attacker could...

Google Android media framework denial of service vulnerability (CNVD-2017-15976)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media framework in Android versions 7.0, 7.1.1 and 7.1.2. An...

PostgreSQL PL/Java Arbitrary Object Access Vulnerability

PostgreSQL PL/Java is the PostgreSQL development team developed a database can be used in Java code to write stored procedures , triggers and functions of the open source project . A security vulnerability exists in PostgreSQL PL/Java 9.0 and earlier versions. An attacker can exploit the...

CVE-2017-0684

A elevation of privilege vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35421151...

CVE-2017-0685

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34203195...

OpenDaylight odl-restconf Denial of Service Vulnerability

OpenDaylight, a project of the Linux Foundation in the United States, is a community-driven, open-source, software-defined networking framework that contains an ensemble of modules capable of performing networking tasks that need to be done quickly. A security vulnerability exists in odl-restconf...

LVRTC eParakstitajs 3 and edoc-libraries information disclosure vulnerability (CNVD-2017-16012 )

LVRTC eParakstitajs 3 and edoc-libraries are both products of the Latvian company LVRTC. The former is an electronic signature solution for insurance use; the latter is a file system for specially created and produced EDOC documents. An information disclosure vulnerability exists in LVRTC...

A vulnerability in the web console of the Antivirus Casper 8.0 anti-virus software allows for the transfer of JavaScript code executed by the client browser.

The vulnerability of the Antivirus Kaspersky 8.0 web console for Linux File Servers relates to the execution of scripts across sites. Exploiting this vulnerability allows a malicious actor to inject JavaScript code through a specially crafted GET request, with the JavaScript code specified in the...