Sierra Wireless GX440 Command Injection Vulnerability (CNVD-2017-10181)

The Sierra Wireless GX440 is a gateway device from Sierra Wireless Canada. The Sierra Wireless GX440 suffers from a command injection vulnerability that can be exploited by a remote attacker to submit a special request and execute arbitrary commands...

Unspecified vulnerability in Moodle (CNVD-2017-06924)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. There is a security vulnerability in Moodle versions 2.x and 3.x. A remote attacker...

Denial of service

A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0, 7.1.1,...

Cerberus FTP Server Remote Buffer Overflow Vulnerability (CNVD-2017-08299)

Cerberus FTP Server is an FTP service program. A buffer overflow vulnerability exists in Cerberus FTP Server, which can be exploited by a remote attacker to conduct a buffer overflow attack on the application, which can be used to execute arbitrary code in the application context...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06594)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the scripting engine presentation when Microsoft Edge handles in-memory objects, where an attacker could execute arbitrary code in the current user context...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06592)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge suffers from a remote memory corruption vulnerability in its implementation, where an attacker bypasses the browser AppContainer sandbox...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06588)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the scripting engine presentation when Microsoft Edge handles in-memory objects, where an attacker could execute arbitrary code in the current user context...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06591)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge handles in-memory objects with a remote memory corruption vulnerability vulnerability in the Chakra JavaScript engine rendering that allows an attacker to corrupt memory and execute arbitrary code in the current...

Microsoft Internet Explorer/Edge Remote Memory Corruption Vulnerability

Internet Explorer is a web browser from Microsoft. Internet Explorer does not properly access memory objects and is implemented with a memory corruption vulnerability that could allow an attacker to execute arbitrary code in the current user context...

Unspecified Vulnerability in Symantec Veritas NetBackup and NetBackup Appliance

Symantec Veritas NetBackup NBU and NetBackup NBU Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability...

NovaBACKUP DataCenter Linux datamover module arbitrary command execution vulnerability

NovaBACKUP DataCenter is a data backup solution developed by NovaStor Germany, Linux is the operating system, datamover module is one of the data transfer module. A security vulnerability exists in the datamover module of NovaBACKUP DataCenter 09.06.03.0353 and earlier versions for Linux. A remot...

HP Network Automation SQL Injection Vulnerability (CNVD-2017-07619)

HP Network Automation is a suite of automated network configuration management tools from Hewlett-Packard HP. The tool automates configuration changes, software updates, compliance audits, and tracking and control of widely distributed, multi-vendor network devices. An SQL injection vulnerability...

Microsoft Edge CVE-2017-0229 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

Microsoft Edge and Internet Explorer CVE-2017-0238 Remote Memory Corruption Vulnerability

Description Microsoft Edge and Internet Explorer are prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currentl...

Microsoft Edge CVE-2017-0227 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

IBM Marketing Platform Cross-Site Scripting Vulnerability (CNVD-2017-08520)

IBM Marketing Platform is a suite of marketing platforms from IBM in the United States. The platform supports marketers in leveraging and analyzing customer interactions on websites, cell phones and social media to deliver targeted marketing campaigns to customers. A cross-site scripting...

Mura CMS Cross-Site Scripting Vulnerability

Mura CMS is the content management system that makes it easier and faster to build and update websites. A cross-site scripting vulnerability exists in Mura CMS version 7.0.6967, which can be exploited by remote attackers to inject arbitrary web script or HTML using the admin/?muraAction parameter...

Unspecified Vulnerability in IBM BigFix Remote Control

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control version 9.1.3. A remote attacker could exploit the vulnerability to perform unauthorized operations...

Trend Micro Threat Discovery Appliance Authentication Bypass Vulnerability

Trend Micro Threat Discovery Appliance TDA is a threat discovery appliance with integrated cloud security technology from Trend Micro. The appliance provides detection of malicious activity at the network layer, threat management services, and threat analysis and reporting. A security vulnerabili...

Oracle Sun ZFS Storage Appliance Kit (AK) Remote Elevation of Privilege Vulnerability

The Oracle ZFS Storage Appliance delivers high performance for all applications and integrates with Oracle Public Cloud, making it easy for users and applications to leverage cloud storage. A remote elevation of privilege vulnerability exists in the Oracle Sun ZFS Storage Appliance Kit AK, which...