collectd SNMP Plugin Denial of Service Vulnerability

collectd is a set of open source running on Linux, Unix system under the system information collection tools. SNMP plugin is one of the simple network management plugin . A denial of service vulnerability exists in the 'csnmpreadtable' function of the snmp.c file of the SNMP plugin in versions of...

CVE-2017-13810

An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows local users to obtain sensitive information by leveraging an error in packet counters...

CVE-2017-10825

Untrusted search path vulnerability in Installer of Flets Easy Setup Tool Ver1.2.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2017-5064

Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Apple iOS Time has an unspecified vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.Time component is one of the time components. A security vulnerability exists in the Time component of Apple iOS prior to version 11, which arises from the possibility that the program fails to properly handle the use of...

Huawei Vicky-AL00 FRP Bypass Vulnerability

The Huawei Vicky-AL00 is a smartphone product from the Chinese company Huawei Huawei. A security vulnerability exists in versions prior to Huawei Vicky-AL00 Vicky-AL00AC00B172D. During the process of entering FRP to reset the phone, an attacker can exploit the vulnerability to enter Talkback mode...

OpenHPI Denial of Service Vulnerability

OpenHPI is a set of open source graphical tools for managing computer hardware. A security vulnerability exists in the openhpi/Makefile.am file in versions of OpenHPI prior to 3.6.0. A local attacker could exploit this vulnerability to cause a denial of service disk consumption...

PYSEC-2017-16

Cross-site request forgery CSRF vulnerability in Kallithea before 0.2...

UBUNTU-CVE-2017-13019

The PGM parser in tcpdump before 4.9.2 has a buffer over-read in print-pgm.c:pgmprint...

CVE-2017-12698

An Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8.220170817. Specially crafted requests allow a possible authentication bypass that could allow remote code execution...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2017-222739)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security bypass vulnerability exists in versions of Mozilla Firefox prior to 55. A remote attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized...

CVE-2017-9661

An Uncontrolled Search Path Element issue was discovered in SIMPlight SCADA Software version 4.3.0.27 and prior. The uncontrolled search path element vulnerability has been identified, which may allow an attacker to place a malicious DLL file within the search path resulting in execution of...

CVE-2017-10238

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-6870

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android All versions before V1.0.2.2. The existing TLS protocol implementation could allow an attacker to read and modify data within a TLS session while performing a Man-in-the-Middle MitM attack...

Rspamd Cross-Site Scripting Vulnerability

Rspamd is a fast spam filtering system. The system evaluates and filters spam through regular expressions, statistical analysis and blacklists. A cross-site scripting vulnerability exists in the interface/js/app/history.js file of the WebUI in versions of Rspamd prior to 1.6.3. A remote attacker...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2017-17517)

VirtualBox is cross-platform virtualization software for x86-based systems. A security vulnerability exists in the Core component implementation of Oracle VM VirtualBox versions prior to 5.1.24, which can be exploited by attackers to compromise system confidentiality, integrity, and availability...

CVE-2017-6978

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

ASUS RT-AC * and RT-N * Information Disclosure Vulnerability (CNVD-2017-06426)

ASUS RT-AC and RT-N are two router products. An information disclosure vulnerability exists in the ASUS RT-AC and RT-N firmware prior to 3.0.0.4.380.7378. An attacker can exploit the vulnerability to obtain sensitive information...

CVE-2017-5043

Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote attacker to perform an out of bounds memory read via a crafted Chrome extension...

CVE-2017-2318

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to read log files which will compromise the integrity of the system, or provide elevation of privileges...