CVE-2017-0641

CVE-2017-0641 is a remote denial-of-service vulnerability in the libvpx Mediaserver component used by Android. A specially crafted file can cause a device to hang or reboot. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The description does not provide ...

CVE-2017-0642

CVE-2017-0642 describes a remote denial-of-service in libhevc within Mediaserver on Android. The vulnerability can be triggered by processing a specially crafted media file, potentially causing the device to hang or reboot. Affected Android versions are 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7...

KanColleViewer Denial of Service Vulnerability

KanColleViewer is a web game management tool from Lifebear Japan. A denial of service vulnerability exists in KanColleViewer 3.8.1 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service...

Fastspot BigTree CMS Cross-Site Scripting Vulnerability (CNVD-2017-08706)

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in Fastspot BigTree CMS 4.2.18 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web...

Elasticsearch Kibana cross-site scripting vulnerability (CNVD-2017-11644)

Elasticsearch Kibana formerly known as elasticsearch-dashboard is a suite of open source, browser-based analytics and search Elasticsearch dashboard tools from Elasticsearch Netherlands.Time Series Visual Builder is a visualization function. A cross-site scripting vulnerability exists in Time...

Fastspot BigTree CMS Cross-Site Scripting Vulnerability

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in Fastspot BigTree CMS versions 4.2.18 and earlier. A remote attacker can exploit this vulnerability by uploading specially...

Code Execution Vulnerability in FineCMS Frontend name and params Parameters

FineCMS is a content management system based on PHP+MySql. A code execution vulnerability exists in the name and params parameters in the frontend of FineCMS version 5.0.6, which allows remote attackers to execute arbitrary code without logging in...

Open vSwitch Security Bypass Vulnerability

Open vSwitch OvS is a multi-layer virtual switch product based on open source technology following the Apache 2.0 license that supports large-scale network automation through programmatic extensions, standard management interfaces and protocols, and more. A security bypass vulnerability exists in...

IBM OpenAdmin Tool SOAP welcomeServer PHP Code Execution

This module exploits an unauthenticated remote PHP code execution vulnerability in IBM OpenAdmin Tool included with IBM Informix versions 11.5, 11.7, and 12.1. The 'welcomeServer' SOAP service does not properly validate user input in the 'newhomepage' parameter of the 'saveHomePage' method allowi...

Microsoft MsMpEng - Remote Use-After-Free Due to Design Issue in GC Engine

Microsoft MsMpEng - Remote Use-After-Free Due to Design Issue in GC Engine Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1258 MsMpEng's JS engine uses garbage collection to manage the lifetime of Javascript objects. During mark and sweep the GC roots the vectors representing t...

Cisco Firepower System Software Remote Security Bypass Vulnerability

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A security vulnerability exists in the feature-license management feature of Cisco Firepower System Software, which stems from a URL filter license that can be disabled. A remote attacker could exploit this...

InvoicePlane has multiple vulnerabilities

InvoicePlane is a free and open source goods billing and customer management software. InvoicePlane suffers from a file upload and cross-site scripting vulnerability that can be exploited by remote attackers to upload arbitrary files or inject arbitrary Web scripts...

QPDF Denial of Service Vulnerability

QPDF is a command line program capable of structuring PDFs. The program can encrypt PDF files, analyze or change the internal structure of PDF files. A denial of service vulnerability exists in the libqpdf.a file in QPDF version 6.0.0. A remote attacker can exploit this vulnerability to cause a...

AutoTrace Denial of Service Vulnerability (CNVD-2017-08499)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A denial of service vulnerability exists in the libautotrace.a file in AutoTrace version 0.31.1. A remote attacker can exploit this vulnerability to cause a denial of service invalid read and SEGV...

Denial of Service Vulnerability in Multiple Asterisk Products

Asterisk Certified Asterisk and Asterisk Open Source are products of Digium Corporation, U.S.A. Asterisk Open Source is a suite of open source telephone exchange PBX system software. The software supports voicemail, multi-party voice conferencing, Interactive Voice Response IVR and more. A remote...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-08076)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-08077)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Oracle PeopleSoft Products PeopleSoft Enterprise SCM Purchasing Remote Vulnerability

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle, which provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise SCM Purchasing is one of the supply chain purchasing management PeopleSoft...

Oracle Communications Security Gateway Remote Vulnerability

Oracle Communications Security Gateway provides security for the delivery of voice and data. Delivery of voice and data services from a trusted service provider's core network is guaranteed through, for example, access to local wifi devices over untrusted networks. A remote security vulnerability...

Red Hat OpenStack Platform Remote Privilege Vulnerability

Red Hat OpenStack Platform is a Red Hat platform that provides the next generation of IaaS Infrastructure as a Service cores for private, public and hybrid clouds. RedHat OpenStack Platformis vulnerable to a remote privilege extraction vulnerability. An attacker can exploit this vulnerability to...