NetApp OnCommand System Manager Information Disclosure Vulnerability

NetApp OnCommand System Manager is a suite of storage management tools from NetApp, USA. The tool supports simplifying, controlling, and automating the setup and ongoing management of NetApp storage systems. A security vulnerability exists in NetApp OnCommand System Manager. A remote attacker cou...

GNU Binutils 'opcodes/aarch64-dis.c' Remote Denial of Service Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. A security vulnerability exists in the...

GNU Binutils 'bfd/elf32-sh.c' Remote Buffer Overflow Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

GNU Binutils 'opcodes/bfin-dis.c' Denial of Service Vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for target files and archives. A security vulnerability exists in the...

"Phoenix Talon" in Linux Kernel (Phoenix Talon)

About “Phoenix Talon” 2017 5 November 9, qimingxing e ADLab found that the Linux kernel there is a remote vulnerability“Phoenix Talon”the Phoenix claw fourth toe of Italy, and relates to CVE-2017-8890, CVE-2017-9075, CVE-2017-9076, CVE-2017-9077, can affect almost all Linux kernel 2.5.69 Linux...

[ASA-201706-20] thunderbird: multiple issues

Arch Linux Security Advisory ASA-201706-20 ========================================== Severity: Critical Date : 2017-06-16 CVE-ID : CVE-2017-5470 CVE-2017-5472 CVE-2017-7749 CVE-2017-7750 CVE-2017-7751 CVE-2017-7752 CVE-2017-7754 CVE-2017-7756 CVE-2017-7757 CVE-2017-7758 CVE-2017-7764 CVE-2017-77...

Microsoft Outlook Remote Memory Corruption Vulnerability

Microsoft Outlook is an e-mail client software bundled with the Office suite from Microsoft USA. The software manages e-mail, contacts, calendars, and more. A remote memory corruption vulnerability exists in Microsoft Outlook. A remote attacker could exploit this vulnerability to execute arbitrar...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-12097)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A remote memory corruption vulnerability exists in Microsoft Edge. An attacker can exploit this vulnerability by tricking a user into viewing a specially crafted...

CVE-2017-0644

A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1...

Denial of service

A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,...

CVE-2017-0642

CVE-2017-0642 describes a remote denial-of-service in libhevc within Mediaserver on Android. The vulnerability can be triggered by processing a specially crafted media file, potentially causing the device to hang or reboot. Affected Android versions are 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7...

CVE-2017-0641

CVE-2017-0641 is a remote denial-of-service vulnerability in the libvpx Mediaserver component used by Android. A specially crafted file can cause a device to hang or reboot. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The description does not provide ...

HPESBUX03759 rev.2 - HP-UX CIFS Sever using Samba, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Code Execution, Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Common Internet File System CIFS, Client/Server Software For HPE CIFS SERVER B.04.05.x release up-to version B.04.05.03.00 and all...

KanColleViewer Denial of Service Vulnerability

KanColleViewer is a web game management tool from Lifebear Japan. A denial of service vulnerability exists in KanColleViewer 3.8.1 and earlier versions. A remote attacker can exploit this vulnerability to cause a denial of service...

Fastspot BigTree CMS Cross-Site Scripting Vulnerability (CNVD-2017-08706)

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in Fastspot BigTree CMS 4.2.18 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web...

Fastspot BigTree CMS Cross-Site Scripting Vulnerability

Fastspot BigTree CMS is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in Fastspot BigTree CMS versions 4.2.18 and earlier. A remote attacker can exploit this vulnerability by uploading specially...

Elasticsearch Kibana cross-site scripting vulnerability (CNVD-2017-11644)

Elasticsearch Kibana formerly known as elasticsearch-dashboard is a suite of open source, browser-based analytics and search Elasticsearch dashboard tools from Elasticsearch Netherlands.Time Series Visual Builder is a visualization function. A cross-site scripting vulnerability exists in Time...

Code Execution Vulnerability in FineCMS Frontend name and params Parameters

FineCMS is a content management system based on PHP+MySql. A code execution vulnerability exists in the name and params parameters in the frontend of FineCMS version 5.0.6, which allows remote attackers to execute arbitrary code without logging in...

Open vSwitch Security Bypass Vulnerability

Open vSwitch OvS is a multi-layer virtual switch product based on open source technology following the Apache 2.0 license that supports large-scale network automation through programmatic extensions, standard management interfaces and protocols, and more. A security bypass vulnerability exists in...

Microsoft MsMpEng - Remote Use-After-Free Due to Design Issue in GC Engine

Microsoft MsMpEng - Remote Use-After-Free Due to Design Issue in GC Engine Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1258 MsMpEng's JS engine uses garbage collection to manage the lifetime of Javascript objects. During mark and sweep the GC roots the vectors representing t...