HPESBHF03784 rev.1 - HPE B-Series SAN Network Advisor Software Running WildFly (formerly JBoss Application Server), Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP B-series SAN Network Advisor Software 14.0.2 and prior running on a Windows OS CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2016-0793 |...

Cacti cross-site scripting vulnerability (CNVD-2017-32248)

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool through snmpget to get the data , using RRDtool drawing graphs to analyze , and provide data and user management features . A cross-site scripting vulnerability exists in the...

EyesOfNetwork web interface cross-site scripting vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A cross-site scripting...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-30541)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge suffers from a remote memory corruption vulnerability in the scripting engine's handling of in-memory objects, which can be exploited by an attacker to corrupt memory by executing arbitrary code in the current use...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-30540)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge suffers from a remote memory corruption vulnerability in the scripting engine's handling of in-memory objects, which can be exploited by an attacker to corrupt memory by executing arbitrary code in the current use...

ZOHO ManageEngine Desktop Central Arbitrary File Execution Vulnerability

ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A security...

ZCMS JavaServer Pages Content Management System Cross-Site Scripting Vulnerability

ZCMS JavaServer Pages Content Management System is a page content management system . A cross-site scripting vulnerability exists in ZCMS JavaServer Pages Content Management System version 1.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Microsoft Windows SMB Server CVE-2017-11781 Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microso...

Sql injection

FileRun version 2017.09.18 and below suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module under the search function...

Joyent Node.js Unauthorized Access Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

GeniXCMS /inc/lib/Control/Backend/menus.control.php File Cross-Site Scripting Vulnerability

MetalGenix GeniXCMS is a PHP-based content management system and framework CMSF from MetalGenix Indonesia, which provides modules for user management, content management and menu management. A cross-site scripting vulnerability exists in the /inc/lib/Control/Backend/menus.control.php file in...

Google Chrome V8 out-of-bounds access vulnerability (CNVD-2017-34843)

Google Chrome is the United States Google Google company developed a Web browser. v8 is one of the open source JavaScript engine. A security vulnerability exists in Google Chrome V8. A remote attacker can exploit the vulnerability to cause cross-border access...

IBM Business Process Manager Cross-Site Scripting Vulnerability (CNVD-2017-34480)

IBM Business Process Manager BPM is a comprehensive set of business process management platform from IBM in the United States. The platform provides a range of tools related to process modeling, assembly, monitoring and deployment for business. A cross-site scripting vulnerability exists in IBM...

WordPress SQL Injection Vulnerability (CNVD-2017-31384)

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress versions prior to 4.8.2. A remote attacker can exploit the...

Bento4 Core/Ap4SampleEntry.cpp File Heap Buffer Overflow Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A heap buffer overflow vulnerability exists in AP4VisualSampleEntry::ReadFields in the Core/Ap4SampleEntry.cpp file in Bento4 version 1.5.0-617. A remote attacker could exploit this vulnerability to cause a denial of service ...

CVE-2017-14645

A heap-based buffer over-read was discovered in AP4BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an application crash, which leads to remote denial of service...

Kaltura Cross-Site Scripting Vulnerability

Kaltura is a set of open source online video platform from Kaltura, Inc. in the United States. A cross-site scripting vulnerability exists in versions of Kaltura prior to 13.2.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Pragyan CMS SQL Injection Vulnerability (CNVD-2017-34577)

Pragyan CMS is a multi-user, modular PHP and MySQL based Content Management System CMS. The system supports custom built-in frameworks, user group rights management, search engine optimization and more. A SQL injection vulnerability exists in Pragyan CMS version 3.0. A remote attacker can exploit...

The vulnerability of the ReadOneJNGImage function (coders/png.c) in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.

The vulnerability of the ReadOneJNGImage function coders/png.c in the console-based image editing tool ImageMagick is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause memory exhaustion and service failure...

Tcpdump White Board protocol parser buffer overflow vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.White Board protocol parser is one of the White Board protocol parsers...