The vulnerability of the ReadOneJNGImage function (coders/png.c) in the console-based image editing tool ImageMagick, which allows a hacker to cause a service failure.

The vulnerability of the ReadOneJNGImage function coders/png.c in the console-based image editing tool ImageMagick is related to resource management errors. Exploiting this vulnerability can allow an attacker, operating remotely, to cause memory exhaustion and service failure...

Tcpdump White Board protocol parser buffer overflow vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.White Board protocol parser is one of the White Board protocol parsers...

EyesOfNetwork web interface SQL injection vulnerability (CNVD-2017-33830)

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A SQL injection vulnerability...

httpd: Uninitialized memory reflection in mod_auth_digest

It was discovered that the httpd's modauthdigest module did not properly initialize memory before using it when processing certain headers related to digest authentication. A remote attacker could possibly use this flaw to disclose potentially sensitive information or cause httpd child process to...

CVE-2017-14408

A stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in MP3Gain version 1.5.2. The vulnerability causes an application crash, which leads to remote denial of service...

Symantec Encryption Desktop Denial of Service Vulnerability

Symantec Encryption Desktop SED is a multi-layer storage encryption solution from Symantec USA. The solution encrypts stored data as well as entire hard disks or hard disk partitions. A security vulnerability exists in versions of SED prior to 10.4.1MP2. A remote attacker could exploit this...

Unspecified Vulnerability in Oracle Hospitality WebSuite8 Cloud Service Component

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer satisfaction,...

Cory Support - pr SQL Injection

Cory Support - pr SQL Injection Exploit : Cory Support pr SQL Injection Vulnerability Author : v3n0m Contact : v3n0matoutlookdotcom Date : September, 06-2017 GMT +7:00 Jakarta, Indonesia Developer : Cory App Software : Cory Support App Link : http://coryapp.com/?product&index Demo :...

EBCMS (News & Information Version) v1.8.2 Exists Arbitrary User Password Reset Vulnerability

EBCMS short for EBCMS is a modular plug-in website management system based on PHP+Mysql. EBCMS News v1.8.2 there are arbitrary user password reset vulnerability vulnerability. The vulnerability is due to the program logic checks are not strict , the attacker can remotely reset any user password...

NexusPHP 'usernw' Parameter SQL Injection Vulnerability

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A SQL injection vulnerability exists in NexusPHP version 1.5.beta5.20120707. A remote attacker can exploit this vulnerability by sending the 'usernw' parameter to the nowarn.php file to execute...

IBM Operationas Analytics Predictive Insights Java SDK Remote Lift Vulnerability

IBM Operationas Analytics Predictive Insights is a proactive fault management system from IBM, USA. The system monitors the performance of physical and logical infrastructures and provides alerts in the event of failures.Java SDK is one of the Java software development kits. A remote boost...

FineCMS Cross-Site Scripting Vulnerability (CNVD-2017-26444)

FineCms is a content management system CMS developed using MVC architecture and PDO database interface. A cross-site scripting vulnerability exists in the controllers/member/api.php file in FineCms version 5.0.11. A remote attacker can exploit this vulnerability to inject arbitrary Web script or...

Unspecified Vulnerability in Red Hat Enterprise Virtualization Manager

Red Hat Enterprise Virtualization RHEV Manager is a core component of Red Hat's RHEV Enterprise Virtualization Platform. The component contains KVM tools that provide virtualization management capabilities. A security vulnerability exists in Red Hat Enterprise Virtualization Manager 3.6 and earli...

Apache2Triad Cross-Site Scripting Vulnerability

Apache2Triad is a server software deployment solution for Windows-based platforms. A cross-site scripting vulnerability exists in Apache2Triad version 1.5.4. A remote attacker can exploit this vulnerability by sending the 'account' parameter to the phpsftpd/users.php file to inject arbitrary web...

DEBIAN-CVE-2017-13143

In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow remote attackers to obtain sensitive information from process memory...

Aruba Networks ClearPass Policy Manager Remote Elevation of Privilege Vulnerability

Aruba Networks ClearPass Policy Manager CPPM is a BYOD Bring Your Own Device network access control policy enforcement platform from Aruba Networks. The platform protects next-generation mobile services, improves network access security and simplifies wired, wireless and VPN network operations. A...

CVE-2017-12955

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure, which may lead to remote denial of service or possibly unspecified other impact...

PYSEC-2017-128

There is an illegal address access in Exiv2::FileIo::pathabi:cxx11 in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service...

DEBIAN-CVE-2017-12938

UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file...

HPE Intelligent Management Center PLAT Arbitrary Code Execution Vulnerability (CNVD-2017-21564)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. An arbitrary code execution...