Wireshark RPCoRDMA Dissector 'packet-rpcrdma.c' Infinite Loop Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark is prone to a remote denial-of-service vulnerability.Attackers can exploit thi...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-05767)

Microsoft Edge is the web browser built into the Windows 10 version. A memory corruption vulnerability vulnerability exists in the implementation when Microsoft Edge does not properly handle memory objects, which can be exploited by an attacker to execute arbitrary code and corrupt memory...

ImageWorsener 'src/imagew-miff.c' Remote Stack Buffer Overflow Vulnerability

ImageWorsener is a set of image scaling and processing utilities. A security vulnerability exists in the iwmiffrconvertrow32 function in the imagew-miff.c file of libimageworsener.a in ImageWorsener version 1.3.0. A remote attacker can exploit this vulnerability to cause a denial of service heap...

CVE-2017-5969

libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service NULL pointer dereference via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should only be used for manual recovery at least for XML...

File Containment Vulnerability in Zhongke Dawning Firewall

Dawning Network & Security System, a firewall device, is a security line of defense that protects servers by being installed in the kernel of the operating system. A file inclusion vulnerability exists in the Dawning Firewall that could allow a remote attacker to traverse unspecified vectors to...

CVE-2016-10313

Jensen of Scandinavia AS Air:Link 3G AL3G version 2.23m Rev. 3, Air:Link 5000AC AL5000AC version 1.13, and Air:Link 59300 AL59300 version 1.04 Rev. 4 devices allow remote attackers to conduct CSRF attacks via certain /goform/ pages...

CVE-2017-7378

The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted PDF document...

Multiple ACTi Products Sensitive Information Disclosure Vulnerabilities

ACTi I Series, etc. is a series of network surveillance cameras from ACTi. A security vulnerability exists in several ACTi products. A remote attacker could exploit the vulnerabilities to submit a special request and obtain sensitive information...

Oracle Java SE Remote Vulnerability (CNVD-2017-04740)

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

GNU Binutils Remote Denial of Service Vulnerability (CNVD-2017-05404)

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

DEBIAN-CVE-2014-9826

ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files...

Yii Framework Cross-Site Scripting Vulnerability

Yii Framework is the Yii team developed a set of component-based , PHP framework for developing Web applications . A cross-site scripting vulnerability exists in versions of Yii Framework prior to 2.0.11. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with...

Subrion CMS SQL Injection Vulnerability

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A SQL injection vulnerability exists in the admin/database/ URI in Subrion CMS version 4.0.5.10. A remote...

sane-backends information disclosure vulnerability

sane-backends is a source package that contains the SANE library, which is the backend and network scanning part. A remote information disclosure vulnerability exists in sane-backends. An attacker can exploit the vulnerability to obtain sensitive information or launch other attacks...

Symantec IT Management Suite Cross-Site Scripting Vulnerability

Symantec IT Management Suite ITMS is a suite of IT management tools from Symantec that enables administrators to securely manage the entire lifecycle of desktops, laptops, and servers in Windows, Mac, Linux, Unix, and virtual environments, including deployment, asset management, program patching,...

ImageMagick Denial of Service Vulnerability (CNVD-2017-04350)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in ImageMagick version 6.8.9.9. A remote attacker can exploit this...

Apache POI Denial of Service Vulnerability (CNVD-2017-04097)

Apache POI is the U.S. Apache Apache Software Foundation in Java written in free open source cross-platform Java API. Apache POI suffers from a remote denial of service vulnerability. An attacker can exploit this vulnerability to cause the CPU to consume too much memory, resulting in a denial of...

OpenStack Nova Information Disclosure Vulnerability (CNVD-2017-04265)

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration in collaboration with Rackspace, Inc.OpenStack Nova is one of the cloud computing construct controllers written in Python that is part of the IaaS system. It is part of the IaaS system....

Microsoft Office Memory Corruption Vulnerability (CNVD-2017-03750)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote memory corruption vulnerability exists in Microsoft Office. An attacker can exploit this...

ImageMagick Arbitrary Command Execution Vulnerability

ImageMagick is a free software for creating, editing, and compositing images.The use of most of ImageMagick's features comes from the command line tools. An arbitrary command execution vulnerability exists in ImageMagick versions prior to 6.9.4-0 and GraphicsMagick, which allows remote attackers ...