CVE-2018-0591

The KINEPASS App for Android Ver 3.1.1 and earlier, and for iOS Ver 3.1.2 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2018-8869

In Lantech IDS 2102 2.0 and prior, nearly all input fields allow for arbitrary input on the device. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2017-9275

NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack...

Video Downloader professional extension for Chrome cross-site scripting vulnerability

Video Downloader professional extension for Chrome is a video download extension for Google Chrome. A cross-site scripting vulnerability exists in versions prior to 2018-04-05 of Video Downloader professional extension for Chrome. A remote attacker can exploit the vulnerability to execute arbitra...

Adobe InDesign CC Memory Corruption Vulnerability

Adobe InDesign CC is a set of layout editing applications from the American company Audobee Adobe. A memory corruption vulnerability exists in Adobe InDesign CC 13.0 and earlier versions for Windows and Macintosh-based platforms. A remote attacker could exploit this vulnerability to execute...

Open-AudIT CSV Injection Vulnerability

Open-AudIT is a network discovery and auditing program. The program intelligently scans networks and network devices and provides status reports. A security vulnerability exists in the export function in versions prior to Open-AudIT 2.2. An attacker can exploit the vulnerability to inject Windows...

CVE-2018-8840

A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution...

UBUNTU-CVE-2018-2816

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

Google Chrome Security Vulnerability (CNVD-2018-09127)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in versions prior to Google Chrome 65.0.3325.146. There is no detailed description of the vulnerability at this time...

CVE-2017-13890

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. macOS before 10.13 is affected. The issue involves the "CoreTypes" component. It allows remote attackers to trigger disk-image mounting via a crafted web site...

MetaIO SDK for Android Arbitrary Code Execution Vulnerability

MetaIO SDK for Android is a software development kit for building augmented reality applications based on the Android platform. A security vulnerability exists in versions of MetaIO SDK for Android prior to 6.0.2.1. The vulnerability can be exploited to execute arbitrary code via the finalize...

NetIQ Identity Manager System Enumeration Vulnerability

NetIQ Identity Manager is a comprehensive identity and access control solution. A system enumeration vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker could exploit this vulnerability by performing system enumeration using details provided in the driver log file of...

mysql: Server: GIS unspecified vulnerability (CPU Jan 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: GIS. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

mysql: Server: DDL unspecified vulnerability (CPU Jan 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

Synology Photo Station Input Validation Vulnerability

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. An input validation vulnerability exists in SYNOPHOTOFlickrMultiUpload in Synology Photo Station versions prior to 6.8.3-3463 and 6.3-2971. A remote attacker can exploit the vulnerability to...

CVE-2017-0932

Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of validation on the input of the Feature functionality. An attacker with access to an operator read-only account and ssh connection to the devices could escalate privileg...

SQLite Denial of Service Vulnerability (CNVD-2018-06132)

SQLite is an open source C-based embedded relational database management system developed by American software developer D. Richard Hipp. The system is characterized by independence, isolation, cross-platform and so on. A security vulnerability exists in versions prior to SQLite 3.22.0. An attack...

Micro Focus NetIQ Identity Manager Applications Information Disclosure Vulnerability

Micro Focus NetIQ Identity Manager Applications is a suite of identity management applications from Micro Focus UK. The program provides the foundation for account provisioning, user self-service, authorization, and Web services, and supports data sharing and synchronization.NetIQ Identity Manage...

OSIsoft PI Data Archive Denial of Service Vulnerability

OSIsoft PI Data Archive is an efficient storage and archiving component that enables high performance data retrieval through client software. A denial of service vulnerability exists in OSIsoft PI Data Archive 2017 and prior versions. An unauthenticated attacker uses unauthenticated custom reques...

PT-2018-5273 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr versions prior to 7.0.0 Description: The issue is a Cross Site Scripting XSS vulnerability in Product details, which can result in the execution of javascript code. Recommendations: For versions prior to 7.0.0, update to version 7.0....