CVE-2017-5223

An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script-provided base directory. If no base...

CVE-2017-5223

CVE-2017-5223 affects PHPMailer before 5.2.22. The vulnerability arises in msgHTML, which transforms HTML and may convert relative image URLs to attachments using a base directory. If no base directory is provided, relative URLs become absolute local file paths, enabling local file disclosure whe...

Microsoft Office CVE-2017-0003 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Rockwell Automation Logix5000 Controllers Stack Buffer Overflow Vulnerability

Rockwell Automation is a British company that provides industrial automation control and globalization information.Logix5000 Controllers is the company's controller series. A remote stack buffer overflow vulnerability exists in Rockwell Automation Logix5000 Controllers. An attacker could exploit...

Friends in War Make or Break 1.7 - 'imgid' SQL Injection

Exploit : Make or Break 1.7 imgid SQL Injection Vulnerability Author : v3n0m Contact : v3n0matoutlookdotcom Date : January, 09-2017 GMT +7:00 Jakarta, Indonesia Software : Make or Break Version : 1.7 Lower versions may also be affected License : Free Download :...

Multiple NETGEAR Devices Privilege Acquisition Vulnerability

NETGEAR Arlo base stations are products of NETGEAR, Inc. Arlo Q cameras and Arlo Q Plus cameras are wireless webcam devices; Arlo base stations are the base stations used by Arlo Q cameras and Arlo Q Plus cameras. cameras and Arlo Q Plus cameras are wireless webcam devices; Arlo base stations are...

Apache Wicket Denial of Service Vulnerability

Apache Wicket is the United States Apache Apache Software Foundation , a set of open source , lightweight , component-based framework , which provides an object-oriented way to develop Web-based dynamic UI applications . A remote denial of service vulnerability exists in Apache Wicket versions 6....

Shutter Arbitrary Command Execution Vulnerability

Shutter is a free and open source screenshot application for Linux based systems developed by German software developer MarioKemper. The program supports screenshots of the entire screen, specific area screenshots and so on. A security vulnerability exists in /usr/bin/shutter in Shutter 0.93.1 an...

UBUNTU-CVE-2016-10195

The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read...

Multiple Samsung devices 'OTP' service remote heap buffer overflow vulnerability

Samsung Galaxy S6 is a mobile smart Android phone from Samsung Electronics. A remote heap buffer overflow vulnerability exists in multiple Samsung devices. An attacker could exploit this vulnerability to cause a denial of service...

SAP Netweaver ABAP EA-DFPS Remote Authorization Bypass Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. A remote authorization bypass vulnerability exists in SAP NetWeaver, which can be exploited by attackers to gain...

RedHat Ceph Remote Denial of Service Vulnerability

Ceph is open source software that provides highly scalable object, block and file storage under a unified system. A remote denial of service vulnerability exists in RedHat Ceph. An attacker could exploit the vulnerability to cause a denial of service condition...

CVE-2016-5842

MagickCore/property.c in ImageMagick before 7.0.2-1 allows remote attackers to obtain sensitive memory information via vectors involving the q variable, which triggers an out-of-bounds read...

Microsoft Office CVE-2016-7298 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Microsoft Office CVE-2016-7263 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Microsoft Office CVE-2016-7289 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

Tesla Motors Gateway ECU Command Injection Vulnerability

The Tesla Motors Gateway ECU is a set of firmware used to manage the car and provide driving functions. A security vulnerability in the Tesla Motors Gateway ECU firmware handling updates allows remote attackers to exploit the vulnerability to submit malicious updates that inject arbitrary command...

mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated...

Unspecified Vulnerability in IBM IMS Enterprise Suite Data Provider for Microsoft .NET

IBM IMS Enterprise Suite Data Provider for Microsoft .NET is a solution from IBM USA that provides Microsoft .NET based applications to access and manipulate IMS data. The solution supports access to IMS data from .NET applications using standard SQL queries and handling of IMS connected links an...

SPIP cross-site scripting vulnerability (CNVD-2016-11960)

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A cross-site scripting vulnerability exists in the ecrire/exec/plonger.php file in SPIP version 3.1.3. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...