cPanel cross-site scripting vulnerability (CNVD-2019-26356)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in versions prior to cPanel 57.9999.54. The vulnerability stems from a lack of proper...

cPanel Information Disclosure Vulnerability (CNVD-2019-29720)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 76.0.8. No detailed vulnerability details are provided at this tim...

CVE-2018-16561

A vulnerability has been identified in SIMATIC S7-300 CPUs All versions V3.X.16. The affected CPUs improperly validate S7 communication packets which could cause a Denial-of-Service condition of the CPU. The CPU will remain in DEFECT mode until manual restart. Successful exploitation requires an...

Synology Application Service Information Disclosure Vulnerability (CNVD-2019-08965)

Synology Application Service is a Synology NAS Network Storage Server feature extension framework from Synology, Inc. An information disclosure vulnerability exists in SYNO.Personal.Profile in Synology Application Service versions prior to 1.5.4-0320. The vulnerability, which originates from a...

Nagios IM SQL Injection Vulnerability

Nagios Incident Manager IM is a network time manager from the US-based Nagios. The product is primarily used to manage and track network event history. A SQL injection vulnerability exists in Nagios IM versions prior to 2.2.7. A remote attacker can exploit this vulnerability to execute arbitrary...

GHSA-99CV-8CVV-666C Apache Airflow vulnerable to Stored XSS

In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views...

CVE-2018-13811

A vulnerability has been identified in SIMATIC STEP 7 TIA Portal All Versions V15.1. Password hashes with insufficient computational effort could allow an attacker to access to a project file and reconstruct passwords. The vulnerability could be exploited by an attacker with local access to the...

DEBIAN-CVE-2018-5805

A boundary error within the "quicktake100loadraw" function internal/dcrawcommon.cpp in LibRaw versions prior to 0.18.8 can be exploited to cause a stack-based buffer overflow and subsequently cause a crash...

Google Chrome Navigation Input Validation Vulnerability

Google Chrome is a web browser developed by Google, Inc.Navigation is one of the browser navigation modules. An input validation vulnerability exists in Navigation in versions of Google Chrome prior to 71.0.3578.80, which stems from the program's failure to properly handle navigation failures...

PRTG Network Monitor File Inclusion Vulnerability

Paessler PRTG Network Monitor is a suite of network monitoring software from the German company Paessler. The software provides usage monitoring, packet sniffing, in-depth analysis and concise reports. A local file inclusion vulnerability exists in Paessler PRTG Network Monitor versions prior to...

CVE-2018-7929

Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167C786 have a lock-screen bypass vulnerability. An attacker could unlock and use the phone through certain operations...

CVE-2018-7777

The vulnerability is due to insufficient handling of updatefile request parameter on updatemodule.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A remote, authenticated attacker can exploit this vulnerability by sending a crafted request to the target server...

ibm_db Code Execution Vulnerability

ibmdb is an asynchronous/synchronous interface linking node.js and IBM DB2. A security vulnerability exists in ibmdb versions prior to 1.0.2 that originates when a program downloads binary resources over the HTTP protocol. A remote attacker could exploit the vulnerability by replacing the request...

DEBIAN-CVE-2018-9988

ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in sslparseserverkeyexchange that could cause a crash on invalid input...

Dell Storage Manager EMConfigMigration Service Directory Traversal Vulnerability

Dell Storage Manager is an application for managing and monitoring multiple Storage Center, PS Series portfolio FluidFS from Dell USA. A directory traversal vulnerability exists in the EMConfigMigration service in Dell Storage Manager versions prior to 16.3.20. A remote attacker could exploit the...

UBUNTU-CVE-2017-15095

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw...

IKARUS anti.virus ntguard.sys driver arbitrary write vulnerability (CNVD-2017-37947)

IKARUS anti.virus is the Austrian IKARUS Security Software company a set of antivirus software products. ntguard.sys driver is one of the self-protection system driver . IKARUS anti.virus 2.16.18 before the version of the ntguard.sys driver there is an arbitrary write vulnerability, the...

WatchGuard Fireware Denial of Service Vulnerability (CNVD-2017-35372)

WatchGuard Fireware XTM is a firewall appliance from WatchGuard, Inc. that provides intrusion protection, spam filtering, SSL VPN, and more through intelligent layering technology.WatchGuard Fireware is the firmware of... A security vulnerability exists in versions of WatchGuard Fireware prior to...

Epignosis eFront CMS Arbitrary File Upload Vulnerability (CNVD-2017-26067)

Epignosis eFront CMS is an online learning system with an Ajax interface from Epignosis, USA. The system allows you to create and manage courses with tools such as a content editor, file manager, and digital library. An arbitrary file upload vulnerability exists in Epignosis eFront CMS versions...

Mozilla Firefox and Firefox ESR Forgery Vulnerability

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the U.S. Firefox ESR is an extended support version of Firefox. A forgery vulnerability exists in versions of Mozilla Firefox prior to 54 and Firefox ESR prior to 52.2. An attacker can exploit this vulnerability ...