9741 matches found
Microsoft Windows Hyper-V CVE-2017-8704 Remote Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial of service vulnerability. An attacker can exploit this issue to crash the host machine, resulting in a denial of service condition. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...
Windows 2008 September 2017 Multiple Security Updates
The remote Windows host is missing multiple security updates released on 2017/09/12. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated use...
PT-2017-18484
Name of the Vulnerable Software and Affected Versions Windows 10 version 1607 Windows Server 2016 Description The issue arises from the Windows Hyper-V component's failure to properly validate input from an authenticated user on a guest operating system, leading to a denial of service. This allow...
PT-2017-18493
Name of the Vulnerable Software and Affected Versions Windows Hyper-V versions on Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1607, and Windows Server 2016 Description The issue arises from the Windows Hyper-V component's failure to properly validate input from an...
Microsoft Windows Hyper-V CVE-2017-8712 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows 10 version...
Microsoft Windows Hyper-V CVE-2017-8711 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows Server 201...
Google Chrome Type Obfuscation Error Vulnerability
Google Chrome is an open source web browser. A type obfuscation vulnerability exists in Google Chrome V8, which allows remote attackers to exploit the vulnerability to submit a special request and execute arbitrary code...
Sql injection
Multiple SQL injection vulnerabilities in SmartCMS v.2...
CVE-2014-9558
CVE-2014-9558 affects SmartCMS v.2 (Smartwebsites). Multiple SQL injection vulnerabilities arise from improper handling of user input before SQL query construction, allowing an attacker to abuse query logic and potentially access/modify database data. Public sources describe the vendor/product as...
CVE-2017-12589
ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack...
PT-2017-12592
Name of the Vulnerable Software and Affected Versions ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 Description The issue concerns a lack of protection against CSRF attacks. Recommendations For ToMAX R60G R60GV2-V2.0-v.2.6.3-170330, consider implementing CSRF protection mechanisms, such as token-based...
CVE-2017-12589: Cross-Site Request Forgery (CSRF)
ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack...
VMware NSX-V Edge Denial of Service Vulnerability
VMware NSX-V Edge is a network and security virtualization platform from VMware. The platform provides virtual machines with full-service, programmable and portable virtual networks deployed on common IP network hardware. A denial of service vulnerability exists in VMware NSX-V Edge versions 6.3....
Apache Sling Servlets Post 2.3.20 Cross Site Scripting Vulnerability
Exploit for multiple platform in category remote exploits CVE-2017-9802: Apache Sling XSS vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Sling Servlets Post 2.3.20 Description: The Javascript method Sling.evalString uses the javascript eval...
Stack overflow
A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...
CVE-2017-9659
A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...
CVE-2017-9660
A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...
Input validation
An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Monitouch V-SFT is installed in a directory with weak access controls by default, which could allow an authenticated attacker with local access to escalate privileges...
CVE-2017-9662
An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Monitouch V-SFT is installed in a directory with weak access controls by default, which could allow an authenticated attacker with local access to escalate privileges...
Heap overflow
A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...