Design/Logic Flaw

When aprtimeexp or aprosexptime functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior, out of bounds memory may be accessed in converting this value to an aprtimeexpt value, potentially revealing the contents of a different static heap value or...

NVIDIA GeForce Experience Installer Framework Elevation of Privilege Vulnerability

NVIDIA GeForce Experience GFE is a suite of automatic graphics card updating tools from NVIDIA.The NVIDIA Installer Framework is one of the installation frameworks.... An elevation of privilege vulnerability exists in NVISystemService64 of the NVIDIA Installer Framework in version 3.x prior to...

SAP Enterprise Portal Cross-Site Scripting Vulnerability

SAP Enterprise Portal is a set of enterprise portal based on NetWeaver system platform developed by SAP, which contains content management, single sign-on, knowledge management, collaborative work, full-text search and other modules. A cross-site scripting vulnerability exists in SAP Enterprise...

DEBIAN-CVE-2017-6272

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges...

UBUNTU-CVE-2017-6272

NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used as the index to an array which may lead to a denial of service or possible escalation of privileges...

CVE-2017-8714

The Windows Hyper-V component on Microsoft Windows 8.1, Windows Server 2012 Gold and R2,, Windows 10 1607, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Remote Desktop...

EE 4GEE WiFi MBB Cross-Site Scripting Vulnerability

The EE 4GEE WiFi MBB is a mobile wireless router device from EE UK. A cross-site scripting vulnerability exists in versions prior to EE 4GEE WiFi MBB EE600005.0031, which stems from a lack of input validation or encryption in the program. A remote attacker can exploit the vulnerability to inject...

Advantech WebAccess nvA1Media Connect MediaPassword Stack Buffer Overflow Remote Code Execution Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow remote code execution vulnerabilit...

Advantech WebAccess nvA1Media Connect MediaUsername Stack Buffer Overflow Remote Code Execution Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow remote code execution vulnerabilit...

Advantech WebAccess RtspVapgDecoderNew2 SetPaybackFilePath Stack Buffer Overflow Remote Code Execution Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow remote code execution vulnerabilit...

chromium-browser: possible command injection in mailto handling

Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac allowed a remote attacker to perform command injection via a crafted HTML page, a similar issue to CVE-2004-0121. For example, characters such as have an...

Command Execution Vulnerability in seacms Backend

seacms is a video-on-demand system based on PHP+MySql technology. His message board cms/gbook.php has a backend command execution vulnerability due to the system not validating incoming content. An attacker is allowed to exploit this vulnerability to execute arbitrary commands...

Pivotal RabbitMQ Cross-Site Scripting Vulnerability

Pivotal RabbitMQ, etc. are products of Pivotal Software, USA. A cross-site scripting vulnerability exists in Pivotal RabbitMQ due to the program failing to adequately validate user input. An attacker could exploit this vulnerability to execute arbitrary script code on the browser of a user on an...

DEBIAN-CVE-2017-0350

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used in an offset calculation may lead to denial of service or potential escalation of privileges...

AppSamvid DLL Load Native Code Execution Vulnerability

AppSamvid is a C-DAC application whitelisting software for Microsoft Windows based operating systems. Whitelisting allows only pre-approved files to be executed on the operating system. This is in contrast to traditional signature-based antivirus software methods that blacklist virus files. A loa...

Cisco Prime Service Catalog Cross-Site Scripting Vulnerability (CNVD-2017-03681)

Cisco Prime Service Catalog PSC is a service catalog solution from Cisco that provides all IT services through a single web portal. The solution supports automated ordering of computing, networking, storage, and other data center resources in a unified service catalog. web framework is one of the...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-03859)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...

CVE-2017-6465

Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP server it is connecting to; however, it doesn't check the response's length, leading to a buffer overflow situation...

Cisco Adaptive Security Appliance Command Injection Vulnerability

Cisco Adaptive Security Appliance ASA is a set of firewall appliances from the American company Cisco Cisco. The appliance also includes IPS Intrusion Prevention System, SSL VPN, IPSec VPN, anti-spam and other features. The Cisco ASA suffers from a command injection vulnerability due to the progr...

CVE-2016-8810

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x100009a where a value passed from an user to the driver is used without...