6698 matches found
CVE-2017-16387
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...
CVE-2017-16405
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...
CVE-2017-16382
An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the...
SQL Injection Vulnerability in E-Tech Website Construction System of Yanji Pilot High-Tech Development Co.
Yanji Pioneer Hi-Tech Development Co., Ltd. is a modernized company of computer software, hardware development and network service, electronic technology application and development. Now it has developed "E-technology website construction software", "E-technology e-commerce", "E-technology office...
SQL Injection Vulnerability in ThinkLC Classifieds Information System template.php Page
ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the template.php page of ThinkLC Classified Information System. It allows attackers to exploit the vulnerability to gain access to sensitive...
CVE-2017-3112
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer; the computation is part of AdobePSDK metadata. The use of an invalid out-of-range pointer offset during...
CVE-2017-11213
An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is past the end of the target buffer due to an integer overflow; the computation is part of the abstraction that creates an arbitrarily sized...
Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16417)
A out-of-bounds write vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an out of range pointer offset that is used to access internal data structure. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted PDF file. Successful...
Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16418)
A out-of-bounds read vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to an out of range pointer offset that is used to access internal data structure. A remote attacker can exploit this vulnerability by enticing the user to open a specially crafted XML/XPS file...
Adobe Acrobat and Reader Out-of-bounds Read (APSB17-36: CVE-2017-16405)
An Out-of-bounds Read vulnerability exists in Adobe Reader and Acrobat. This vulnerability occurs as a result of computation that reads data that is past the end of the target buffer. A successful attack can lead to sensitive data exposure...
SQL Injection Vulnerability in Youkai 365 Business v1.5 System
Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. A SQL injection vulnerability exists in the UX365 Business v1.5 system, which is caus...
PT-2017-14247 · Cumulus +2 · Cumulus Linux +2
Name of the Vulnerable Software and Affected Versions: FRRouting FRR versions 2.0.2 and earlier, 3.x before 3.0.2 FRRouting FRR in Cumulus Linux before 3.4.3 Description: The issue allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer. Thi...
SAP NetWeaver Instance Agent Service Information Disclosure Vulnerability
SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver Instance Agent Service, which can be exploited b...
PT-2017-4218 · Vim +4 · Vim +4
Name of the Vulnerable Software and Affected Versions: Vim versions prior to 8.0.1263 Description: The issue is related to the fileio.c component in Vim, which sets the group ownership of a .swp file to the editor's primary group. This can allow local users to obtain sensitive information by...
HackerOne: Private partial disclosure of h1 infrastructure
Description I've found that following servers & services can be potentially interesting when attacking h1-infrastructure: Payments Admin ██████ API Docs ██████████ API █████████ MailCatcher ██████████ Story Book ███ Karma ████████ Core Test Server █████████ Core Staging ████ Core Production...
SQL Injection Vulnerability in DM Enterprise Building System v201710
DM building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM enterprise website building system v201710 login at the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain...
SQL Injection Vulnerability in Zhangjiakou Extraordinary Technology Website Building System
Zhangjiakou Extraordinary Technology Co., Ltd Extraordinary Technology for short, is an Internet service provider in the field of enterprise informationization construction and application services. Zhangjiakou Extraordinary Technology website building system has a SQL injection vulnerability,...
SQL Injection Vulnerability in Ningbo Yinwen Network CMS
Yinwen Building System is a CMS content management system. A SQL injection vulnerability exists in Ningbo Yinwen Web CMS. The vulnerability is caused due to the system failing to effectively filter the data submitted by users. An attacker can exploit this vulnerability to obtain sensitive...
Cisco Spark Messaging Software HTML Injection Vulnerability
Cisco Spark Messaging Software is a collaboration service solution from Cisco. The program by providing a virtual space, so that teams in any location can work together, call and video, and can discuss issues, storage team files and documents. A cross-site scripting vulnerability exists in the We...