17478 matches found
Google Android System UI Remote Code Execution Vulnerability (CNVD-2017-21550)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA for short. System UI is the system interface that comes with Android. A remote code execution vulnerability exists in System UI in Google Android versions 7.1.1 and 7.1.2. A remote...
CVE-2017-0682
A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36588422...
Remote code execution
A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36588422...
XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-14628)
XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...
XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-14632)
XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...
The vulnerability in the implementation of the operating system NetBSD’s stack protection mechanism allows a hacker to execute arbitrary code.
The vulnerability of the Linux kernel’s stack protection mechanism is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using specially crafted binary files with setuid attributes as,usr,bin,at...
CVE-2017-9925
In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...
CVE-2017-8370
IrfanView version 4.44 32bit with FPX Plugin 4.45 allows remote attackers to execute arbitrary code or cause a denial of service Heap Corruption and application crash in processing a FlashPix .FPX file, a different vulnerability than CVE-2017-7721...
CVE-2017-9925
Removed by vendor...
CVE-2017-1253
CVE-2017-1253 affects IBM Security Guardium up to version 10.x, where a remote authenticated attacker could execute arbitrary commands via a specially crafted request due to an OS command injection vulnerability. The IBM Security Guardium bulletin confirms affected releases (including 9.0–9.5 and...
CVE-2017-1253
IBM Security Guardium 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 124633...
KLA11062 Arbitrary code execution vulnerability in Notepad++
An unspecified vulnerability was found in Notepad++ 7.3.3 with Hex Editor Plugin v0.9.5. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file or an untrusted specially designed file from a remote...
Code injection
In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymization module allows remote authenticated privileged users to execute arbitrary Python code, because unpickle is used...
Design/Logic Flaw
The dashboard subscription interface in Request Tracker RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain privileges to execute arbitrary code via a crafted saved search name...
CVE-2017-5944
The dashboard subscription interface in Request Tracker RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain privileges to execute arbitrary code via a crafted saved search name...
CVE-2017-5944
The dashboard subscription interface in Request Tracker RT 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 might allow remote authenticated users with certain privileges to execute arbitrary code via a crafted saved search name...
The vulnerability in the JavaScript kernel of Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability in the Microsoft Edge JavaScript kernel relates to improper access to objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the context of the current user...
CVE-2017-10682
CVE-2017-10682 affects Piwigo up to version 2.9.1, with an SQL injection in the administrative backend. The vulnerability allows remote attackers to execute arbitrary SQL commands via the cat_true or cat_false parameter used in the comments/status page to cat_options.php. Affected component: admi...