12443 matches found
CVE-2017-16115
The timespan module is vulnerable to regular expression denial of service. Given 50k characters of untrusted user input it will block the event loop for around 10 seconds...
CVE-2018-11553
SGIN.CN xiangyun platform V9.4.10 has XSS via the loginurl parameter to /login.php...
Unspecified Vulnerability in Mozilla Firefox and Firefox ESR (CNVD-2018-11926)
Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox versions prior to 60 and Firefox ESR versions...
Facebook Accused of Giving Over 60 Device-Makers Deep Access to User Data
After being embroiled into controversies over its data sharing practices, it turns out that Facebook had granted inappropriate access to its users' data to more than 60 device makers, including Amazon, Apple, Microsoft, Blackberry, and Samsung. According to a lengthy report published by The New...
Apple macOS High Sierra Hypervisor Memory Corruption Vulnerability
Apple macOS High Sierra is a suite of specialized operating systems developed by Apple for Mac computers.A Hypervisor also known as a Virtual Machine Monitor VMM is an intermediate software layer that runs between a physical server and an operating system, allowing multiple operating systems and...
Apple macOS High Sierra Arbitrary Code Execution Vulnerability (CNVD-2018-12162)
Apple macOS High Sierra is a specialized operating system for Mac computers developed by Apple Inc. in the U.S. IOFireWireAVC is one of the IO video transport components. A security vulnerability exists in the IOFireWireAVC component in Apple macOS High Sierra versions prior to 10.13.5. The...
Apple iOS and macOS High Sierra Mail Information Disclosure Vulnerability
Apple iOS and macOS High Sierra are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers. mail is one of the email components. A security vulnerability exists in the Mail component of Apple iOS before 11....
Apple macOS High Sierra ATS Type Obfuscation Vulnerability
Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.ATS is one of the Application Transport Security components. A security vulnerability exists in the ATS component in Apple macOS High Sierra versions prior to 10.13.5. The vulnerability can be exploited...
Apple macOS High Sierra Firmware Device Configuration Vulnerability
Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in the Firmware component of Apple macOS High Sierra versions prior to 10.13.5. The vulnerability can be exploited by an attacker to modify the EFI flash area with the...
Apple macOS High Sierra input validation vulnerability (CNVD-2018-12161)
Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers.Intel Graphics Driver is one of the drivers for the graphics card. A security vulnerability exists in the Intel Graphics Driver component of Apple macOS High Sierra versions prior to 10.13.5. The...
Apple macOS High Sierra Access Control Vulnerability
Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers.Speech is one of the speech recognition components. A security vulnerability exists in the handling of microphone access in the Speech component in Apple macOS High Sierra versions prior to 10.13.5. An...
Apple macOS High Sierra Accessibility Framework Information Disclosure Vulnerability
Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Accessibility Framework is one of the accessibility components. A security vulnerability exists in the Accessibility Framework component in Apple macOS High Sierra versions prior to 10.13.5. An attacker...
Apple macOS High Sierra memory corruption vulnerability
Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.IOGraphics is one of the input and output graphics components. A security vulnerability exists in the IOGraphics component in Apple macOS High Sierra versions prior to 10.13.5. The vulnerability can be...
Apache Batik Information Disclosure Vulnerability (CNVD-2018-10557)
Apache Batik also known as Batik SVG Toolkit or Batik Java SVG Toolkit is the U.S. Apache Apache Software Foundation's set of Java-based application programs mainly used to deal with SVG format images. An information disclosure vulnerability exists in Apache Batik versions 1.x prior to 1.10. An...
CVE-2018-1459
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 is vulnerable to stack based buffer overflow, caused by improper bounds checking which could lead an attacker to execute arbitrary code. IBM X-Force ID: 140210...
CVE-2018-1449
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140044...
Citrix XenMobile Server Sensitive Data Disclosure Vulnerability
Citrix XenMobile Server is a mobility management solution from Citrix Systems. The solution is capable of managing mobile devices, developing mobile policies and compliance rules, and providing insight into the operation of mobile mobile networks. A security vulnerability exists in Citrix XenMobi...
CVE-2018-10654
There is a Hazelcast Library Java Deserialization Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...