CVE-2016-10313

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct CSRF attacks via certain /goform/ pages...

Multiple ACTi Products Sensitive Information Disclosure Vulnerabilities

ACTi I Series, etc. is a series of network surveillance cameras from ACTi. A security vulnerability exists in several ACTi products. A remote attacker could exploit the vulnerabilities to submit a special request and obtain sensitive information...

Oracle Java SE Remote Vulnerability (CNVD-2017-04740)

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

GNU Binutils Remote Denial of Service Vulnerability (CNVD-2017-05404)

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

DEBIAN-CVE-2014-9826

ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files...

Yii Framework Cross-Site Scripting Vulnerability

Yii Framework is the Yii team developed a set of component-based , PHP framework for developing Web applications . A cross-site scripting vulnerability exists in versions of Yii Framework prior to 2.0.11. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with...

Subrion CMS SQL Injection Vulnerability

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A SQL injection vulnerability exists in the admin/database/ URI in Subrion CMS version 4.0.5.10. A remote...

sane-backends information disclosure vulnerability

sane-backends is a source package that contains the SANE library, which is the backend and network scanning part. A remote information disclosure vulnerability exists in sane-backends. An attacker can exploit the vulnerability to obtain sensitive information or launch other attacks...

Symantec IT Management Suite Cross-Site Scripting Vulnerability

Symantec IT Management Suite ITMS is a suite of IT management tools from Symantec that enables administrators to securely manage the entire lifecycle of desktops, laptops, and servers in Windows, Mac, Linux, Unix, and virtual environments, including deployment, asset management, program patching,...

Apache POI Denial of Service Vulnerability (CNVD-2017-04097)

Apache POI is the U.S. Apache Apache Software Foundation in Java written in free open source cross-platform Java API. Apache POI suffers from a remote denial of service vulnerability. An attacker can exploit this vulnerability to cause the CPU to consume too much memory, resulting in a denial of...

ImageMagick Denial of Service Vulnerability (CNVD-2017-04350)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in ImageMagick version 6.8.9.9. A remote attacker can exploit this...

OpenStack Nova Information Disclosure Vulnerability (CNVD-2017-04265)

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration in collaboration with Rackspace, Inc.OpenStack Nova is one of the cloud computing construct controllers written in Python that is part of the IaaS system. It is part of the IaaS system....

Microsoft Office Memory Corruption Vulnerability (CNVD-2017-03750)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote memory corruption vulnerability exists in Microsoft Office. An attacker can exploit this...

SAP ERP Remote Authentication Bypass Vulnerability

SAP ERP is a set of integrated enterprise resource planning system based on customer/server structure and open system from SAP, Germany. The system supports custom reports, standardized processes and automated execution of business processes. An authentication bypass vulnerability exists in SAP...

SAP ERP Remote Authorization Bypass Vulnerability

SAP ERP is a set of integrated enterprise resource planning system based on customer/server structure and open system from SAP, Germany. The system supports custom reports, standardized processes and automated execution of business processes. A remote authorization bypass vulnerability exists in...

ImageMagick Arbitrary Command Execution Vulnerability

ImageMagick is a free software for creating, editing, and compositing images.The use of most of ImageMagick's features comes from the command line tools. An arbitrary command execution vulnerability exists in ImageMagick versions prior to 6.9.4-0 and GraphicsMagick, which allows remote attackers ...

Cisco Wireless LAN Controller Remote Security Bypass Vulnerability

Cisco Wireless LAN Controller is a wireless LAN controller from Cisco. A remote security bypass vulnerability exists in Cisco Wireless LAN Controller. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations, resulting in further attacks...

IBM WebSphere Application Server Remote Elevation of Privilege Vulnerability (CNVD-2017-03344)

IBM WebSphere Application Server WAS is an application server product developed and distributed by IBM in the U.S. It is a platform for JavaEE and Web services applications, and is the foundation of the IBM WebSphere software platform. A remote elevation of privilege vulnerability exists in IBM...

Microsoft Windows Server Message Block Arbitrary Code Execution Vulnerability

Microsoft Windows is a family of operating systems from Microsoft. Microsoft Windows remote users can send specially crafted data to a target SMBv1 server to execute arbitrary code on the target system...

Microsoft Edge CVE-2017-0131 Scripting Engine Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...