IBM OpenAdmin Tool SOAP welcomeServer PHP Code Execution

This module exploits an unauthenticated remote PHP code execution vulnerability in IBM OpenAdmin Tool included with IBM Informix versions 11.5, 11.7, and 12.1. The 'welcomeServer' SOAP service does not properly validate user input in the 'newhomepage' parameter of the 'saveHomePage' method allowi...

Cisco Firepower System Software Remote Security Bypass Vulnerability

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A security vulnerability exists in the feature-license management feature of Cisco Firepower System Software, which stems from a URL filter license that can be disabled. A remote attacker could exploit this...

InvoicePlane has multiple vulnerabilities

InvoicePlane is a free and open source goods billing and customer management software. InvoicePlane suffers from a file upload and cross-site scripting vulnerability that can be exploited by remote attackers to upload arbitrary files or inject arbitrary Web scripts...

QPDF Denial of Service Vulnerability

QPDF is a command line program capable of structuring PDFs. The program can encrypt PDF files, analyze or change the internal structure of PDF files. A denial of service vulnerability exists in the libqpdf.a file in QPDF version 6.0.0. A remote attacker can exploit this vulnerability to cause a...

AutoTrace Denial of Service Vulnerability (CNVD-2017-08499)

AutoTrace is a set of software for converting bitmap files Bitmap to vector files Vector. A denial of service vulnerability exists in the libautotrace.a file in AutoTrace version 0.31.1. A remote attacker can exploit this vulnerability to cause a denial of service invalid read and SEGV...

Denial of Service Vulnerability in Multiple Asterisk Products

Asterisk Certified Asterisk and Asterisk Open Source are products of Digium Corporation, U.S.A. Asterisk Open Source is a suite of open source telephone exchange PBX system software. The software supports voicemail, multi-party voice conferencing, Interactive Voice Response IVR and more. A remote...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-08076)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Oracle Hospitality OPERA 5 Property Services Remote Vulnerability (CNVD-2017-08077)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Oracle Communications Security Gateway Remote Vulnerability

Oracle Communications Security Gateway provides security for the delivery of voice and data. Delivery of voice and data services from a trusted service provider's core network is guaranteed through, for example, access to local wifi devices over untrusted networks. A remote security vulnerability...

Red Hat OpenStack Platform Remote Privilege Vulnerability

Red Hat OpenStack Platform is a Red Hat platform that provides the next generation of IaaS Infrastructure as a Service cores for private, public and hybrid clouds. RedHat OpenStack Platformis vulnerable to a remote privilege extraction vulnerability. An attacker can exploit this vulnerability to...

Oracle PeopleSoft Products PeopleSoft Enterprise SCM Purchasing Remote Vulnerability

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle, which provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise SCM Purchasing is one of the supply chain purchasing management PeopleSoft...

Sierra Wireless GX440 Command Injection Vulnerability (CNVD-2017-10181)

The Sierra Wireless GX440 is a gateway device from Sierra Wireless Canada. The Sierra Wireless GX440 suffers from a command injection vulnerability that can be exploited by a remote attacker to submit a special request and execute arbitrary commands...

Unspecified vulnerability in Moodle (CNVD-2017-06924)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. There is a security vulnerability in Moodle versions 2.x and 3.x. A remote attacker...

Denial of service

A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0, 7.1.1,...

Cerberus FTP Server Remote Buffer Overflow Vulnerability (CNVD-2017-08299)

Cerberus FTP Server is an FTP service program. A buffer overflow vulnerability exists in Cerberus FTP Server, which can be exploited by a remote attacker to conduct a buffer overflow attack on the application, which can be used to execute arbitrary code in the application context...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06592)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge suffers from a remote memory corruption vulnerability in its implementation, where an attacker bypasses the browser AppContainer sandbox...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06591)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge handles in-memory objects with a remote memory corruption vulnerability vulnerability in the Chakra JavaScript engine rendering that allows an attacker to corrupt memory and execute arbitrary code in the current...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06594)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the scripting engine presentation when Microsoft Edge handles in-memory objects, where an attacker could execute arbitrary code in the current user context...

Microsoft Internet Explorer/Edge Remote Memory Corruption Vulnerability

Internet Explorer is a web browser from Microsoft. Internet Explorer does not properly access memory objects and is implemented with a memory corruption vulnerability that could allow an attacker to execute arbitrary code in the current user context...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06588)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the scripting engine presentation when Microsoft Edge handles in-memory objects, where an attacker could execute arbitrary code in the current user context...