Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2017-37109)

Microsoft .NET Core is a free open source development platform from Microsoft USA. The platform features multi-language support and cross-platform. A denial of service vulnerability exists in Microsoft .NET Core versions 1.0, 1.1, and 2.0 due to the program failing to properly parse certificate...

CVE-2017-2883

An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the device to execute arbitrary code. An attacker needs to impersonate a remote server in order to trigger this vulnerability...

CVE-2017-2881

An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can cause the product to run an attacker-supplied shell script. An attacker can intercept and alter network traffic to trigger this vulnerability...

CVE-2017-12084

A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. A specific set of network packets can remotely start an SSH server on the device, resulting in a persistent backdoor. An attacker can send an API call to enable the SSH server...

Ayukov NFTPD Buffer Overflow Vulnerability

Ayukov NFTPD is a file transfer protocol client. A buffer overflow vulnerability exists in Ayukov NFTPD 2.0 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary code...

Unspecified Vulnerability in Oracle Hospitality Guest Access (CNVD-2017-31510)

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation. The solution provides human resources cost management, provide customers with the entire journey of service tracking management to improve custome...

LOYTEC LVIS-3ME Relative Path Traversal Vulnerability

LVIS-3ME is a graphical user interface from LOYTEC. A relative path traversal vulnerability exists in LOYTEC LVIS-3ME versions prior to 6.2.0, which can be exploited by an attacker to create or modify files, or execute arbitrary code, due to the inability of the web user interface to prevent user...

D-Link DIR-850L REV.A and REV.B Denial of Service Vulnerabilities

The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. The security vulnerability exists in D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and prior versions, and firmware FW208WWb02 and prior versions. A remote attacker could exploit th...

Unspecified Vulnerability in CrushFTP

CrushFTP is a cross-platform Java FTP server from the U.S. CrushFTP company . A security vulnerability exists in CrushFTP versions prior to 7.8.0 and 8.x versions prior to 8.2.0. No detailed vulnerability details are provided at this time...

CVE-2017-14037

CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability...

CVE-2017-10103

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications subcomponent: Miscellaneous. Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0 and 12.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HT...

CVE-2017-10091

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: UI Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

IBM WebSphere MQ Internet Pass-Thru Denial of Service Vulnerability

IBM WebSphere MQ is a messaging middleware product of the United States IBM Corporation.IBM WebSphere MQ Internet Pass-Thru MQIPT is a WebSphere MQ product based on the implementation of the remote site and the Internet for the implementation of messaging between the extension. A denial of servic...

FreeRDP Denial of Service Vulnerability (CNVD-2017-25710)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. A denial of service vulnerability exists in the challenge packet handling process in FreeRDP version 2.0.0-beta1+android11. An attacker can exploit this vulnerability to cause a denial ...

Cisco Context Service SDK Remote Code Execution Vulnerability

Cisco Context Service SDK is the United States Cisco Cisco company's set of software development kit for Context Service. An arbitrary code execution vulnerability exists in the update process of the JAR file in version 2.0 of the Cisco Context Service SDK, which stems from the program failing to...

CVE-2017-9543

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm...

Bram Korsten Note Cross-Site Scripting Vulnerability

Bram Korsten Note is a lightweight php-based content management system developed by Dutch developer Bram Korsten. A cross-site scripting vulnerability exists in the note-source\ui\editor.php file in Bram Korsten Note 1.2.0 and earlier versions. A remote attacker can exploit this vulnerability to...

Wireshark 'epan/dissectors/packet-rgmp.c' Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in the epan/dissectors/packet-rgmp.c file of th...

Juniper Networks NorthStar Controller Application Buffer Overflow Vulnerability (CNVD-2017-07222)

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. A buffer overflow vulnerability exists in Juniper Networks NorthStar...

Serendipity Cross-Site Request Forgery Vulnerability

Serendipity is scalable PHP-powered weblog engine. A cross-site request forgery vulnerability in Serendipity 2.0.5 allows attackers to install any theme via a GET request...