Quest NetVault Backup 'NVBUJobHistory Get' Method SQL Injection Vulnerability

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUJobHistory Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings prior...

PT-2017-4248 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.11 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Server: Security: Roles subcomponent. This allows an attacker with network access via...

PT-2017-14832 · Fontforge +3 · Fontforge +3

Name of the Vulnerable Software and Affected Versions: FontForge versions prior to 20170731 Description: The issue concerns the uiutil.c component in FontForge, which fails to validate strings before launching a program specified by the BROWSER environment variable. This could potentially allow...

Synology Router Manager Path Traversal Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology. A directory traversal vulnerability exists in SYNO.FileStation.Extract in versions of SRM prior to 1.1.5-6542-4. A remote attacker can exploit this vulnerability to write arbitrary files with th...

Amazon Key Weakness Vulnerability

Amazon Key is a smart lock service from Amazon USA. A security vulnerability exists in Amazon Key 2017-11-16 and earlier versions. An attacker could use the vulnerability to freeze the camera feed...

Avaya IP Office SoftConsole Client Buffer Overflow Vulnerability

Avaya IP Office is a stackable, scalable, single small business communications system from Avaya, USA. The system manages voice communications, instant messaging, and e-mail through a single PC-based portal and supports a variety of drag-and-drop application tools.SoftConsole client is one of the...

bftpd Denial of Service Vulnerability

Bftpd is a small FTP server. A security vulnerability exists in the file rename function in Bftpd versions prior to 4.7. An attacker can exploit this vulnerability to cause a denial of service memory leak...

WordPress 'wpdb::prepare()' SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress versions prior to 4.8.3, which stems from the program faili...

Apple macOS High Sierra PCRE Component Denial of Service Vulnerability

Apple macOS High Sierra is a set of Apple's proprietary operating system for Mac computers.PCRE is a library of regular expression functions. A denial of service vulnerability exists in the PCRE component in Apple macOS High Sierra versions prior to 10.13.1 and prior to version 8.40. A remote...

UBUNTU-CVE-2017-5105

Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform domain spoofing via IDN homographs in a crafted domain name...

Irssi Memory Misreference Vulnerability

Irssi is an IRC client program with a text user interface, released under the GPL. A security vulnerability exists in versions of Irssi prior to 1.0.5. A remote attacker could exploit this vulnerability to cause a denial of service...

phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-33499)

phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...

chromium-browser: use after free in webaudio

A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-14017

An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An uncontrolled search path element vulnerability has been identified, which may allow a remote attacker without privileges to execute arbitrary code in the form of a malicious DLL file...

Huawei MHA-AL00A Reboot Vulnerability

Huawei MHA-AL00A is a smartphone product of Huawei, China.Bastet is one of the communication drivers. A security vulnerability exists in Bastet in versions prior to Huawei MHA-AL00A MHA-AL00BC00B231, which stems from a missing parameter check. An attacker can exploit the vulnerability by tricking...

Google Golang Go Remote Code Execution Vulnerability

Google Golang Go is a programming language optimized for programming applications on multiprocessor systems by Google. A remote code execution vulnerability exists in Google Golang Go versions prior to 1.8.4 and 1.9.x versions prior to 1.9.1. A remote attacker could exploit the vulnerability to...

CVE-2017-10612

A persistent site scripting vulnerability in Juniper Networks Junos Space allows users who can change certain configuration to implant malicious Javascript or HTML which may be used to steal information or perform actions as other Junos Space users or administrators. Affected releases are Juniper...

WordPress cp-contact-form-with-paypal plugin cross-site request forgery vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site. cp-contact-form-with-paypal aka CP Contact Form with PayPal plugin is one of the payment plugins. A cross-site...

Mozilla Firefox, Firefox ESR and Thunderbird Security Bypass Vulnerability

Mozilla Firefox, Firefox ESR and Thunderbird are all developed by the Mozilla Foundation.Firefox is an open source web browser, Firefox ESR is an extended support version of Firefox.Thunderbird is a standalone email client from the Mozilla Thunderbird is a separate email client from Mozilla...

Mozilla: Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4 (MFSA 2017-22)

Memory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox 56, Firefox ESR 52.4, and Thunderbird...