Linux kernel local denial of service vulnerability (CNVD-2017-33484)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the drivers/media/usb/dvb-usb/dib0700devices.c file in Linux kernel 4.13.11 and earlier versions. A local attacker ca...

Linux kernel local denial of service vulnerability (CNVD-2017-33090)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the sound/usb/mixer.c file in versions of Linux kernel prior to 4.13.8. A local attacker can exploit this vulnerability to...

Linux kernel local denial of service vulnerability (CNVD-2017-33089)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the drivers/uwb/uwbd.c file in versions of Linux kernel prior to 4.13.6. A local attacker could exploit this vulnerability to...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-35597)

ZOHO ManageEngine Applications Manager is a set of IT operations management solutions from ZOHO. A SQL injection vulnerability exists in Zoho ManageEngine Applications Manager version 13. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands via the GraphicalView.do...

Linux kernel local denial of service vulnerability (CNVD-2017-33097)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'usbgetbosdescriptor' function in the drivers/usb/core/config.c file in versions of Linux kernel prior to 4.13.10. A loca...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-35598)

ZOHO ManageEngine Applications Manager is a set of IT operations management solutions from ZOHO. A SQL injection vulnerability exists in Zoho ManageEngine Applications Manager version 13. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the 'name' paramete...

DEBIAN-CVE-2017-16527

sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service sndusbmixerinterrupt use-after-free and system crash or possibly have unspecified other impact via a crafted USB device...

Apple macOS Sierra memory corruption vulnerability (CNVD-2017-34258)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Quick Look is a file preview component for Quick Look. A security vulnerability exists in the Quick Look component in Apple macOS High Sierra versions prior to 10.13.1. A remote attacker can exploit thi...

Apple macOS High Sierra Kernel Arbitrary Code Execution Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. An arbitrary code execution vulnerability exists in the Kernel component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this...

Apple macOS High Sierra Fonts Forgery Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Fonts is one of the font components. A security vulnerability exists in the Fonts component of Apple macOS High Sierra versions prior to 10.13.1. A remote attacker can exploit this vulnerability to spoo...

Apple macOS High Sierra ImageIO Component Denial of Service Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. imageIO is one of the static methods used to perform common image I/O operations. A denial of service vulnerability exists in the ImageIO component in Apple macOS High Sierra versions prior to 10.13.1....

Apple macOS High Sierra Quick Look Security Bypass Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Quick Look is a file preview component for Quick Look. A security vulnerability exists in the Quick Look component in Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this...

Apple macOS High Sierra Kernel Arbitrary Code Execution Vulnerability (CNVD-2017-34161)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. An arbitrary code execution vulnerability exists in the Kernel component of Apple macOS High Sierra versions prior to 10.13.1. A remote attacker can exploit this...

Apple macOS High Sierra Kernel Security Bypass Vulnerability (CNVD-2017-34159)

Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security bypass vulnerability exists in the Kernel component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this vulnerability with...

Apple macOS High Sierra AppleScript Code Execution Vulnerability

Apple macOS High Sierra is a proprietary operating system developed by Apple for Mac computers, with AppleScript as one of the built-in scripting languages. A security vulnerability exists in the AppleScript component of Apple macOS High Sierra versions prior to 10.13.1. The vulnerability can be...

UBUNTU-CVE-2017-15951

The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the "negative" state to avoid a race condition, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system...

CVE-2017-7150

An issue was discovered in certain Apple products. macOS before 10.13 Supplemental Update is affected. The issue involves the "Security" component. It allows attackers to bypass the keychain access prompt, and consequently extract passwords, via a synthetic click...

CVE-2017-7143

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Captive Network Assistant" component. It allows remote attackers to discover cleartext passwords in opportunistic circumstances by sniffing the network during use of the captive portal...

CVE-2017-7125

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "file" product. Versions before 5.30 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact...

CVE-2017-7122

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the third-party "file" product. Versions before 5.30 allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact...