462 matches found
Security Bulletin: Multiple vulnerabilities fixed in IBM HTTP Server (APAR PI22070)
Summary IBM HTTP Server is affected by multiple vulnerabilities. Vulnerability Details CVE ID: CVE-2014-0226 Description: The IBM HTTP server is vulnerable to a heap-based buffer overflow, caused by a race condition in the modstatus module when handling the scoreboard. By sending a...
Quest KACE Systems Management Command Injection
This module exploits a command injection vulnerability in Quest KACE Systems Management Appliance version 8.0.318 and possibly prior. The downloadagentinstaller.php file allows unauthenticated users to execute arbitrary commands as the web server user www. A valid Organization ID is required. The...
SAP Identity Management XML External Entity Injection Vulnerability
SAP Identity Management is a suite of identity management applications from SAP that can be embedded into business processes. A security vulnerability exists in SAP Identity Management version 8.0, which arises from the program's failure to validate an XML document from an untrusted source. An...
CVE-2018-2859
Vulnerability in the Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach component of Oracle Financial Services Applications subcomponent: Portfolio, Attribution. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticate...
Out-of-bounds
In ihevcdfmtconv of ihevcdfmtconv.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1,...
Denial of service
A denial of service vulnerability in the Android system system ui. Product: Android. Versions: 8.0. Android ID: A-66498711...
CVE-2017-13275
In getVSCoverage of CmapCoverage.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID:...
CVE-2017-13282
In avrcctrlparsvendorrsp of avrcparsct.cc, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 7.0, 7.1.1,...
Denial of service
A denial of service vulnerability in the Android system system ui. Product: Android. Versions: 8.0. Android ID: A-69969749...
Information disclosure
An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior, netCADOPS Web Application Version 7.1 and prior, netCADOPS Web Application Version 7.2x and prior, netCADOPS Web Application Version 8.0 and prior, and netCADOPS Web Application Version 8.1 and...
CVE-2017-13228
In function ih264drefidxreordering of libavc, there is an out-of-bounds write due to modCount being defined as an unsigned character. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...
CVE-2017-13231
In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-67962232...
Unspecified Vulnerability in Oracle Financial Services Balance Sheet Planning Component
Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle Financial Services Balance Sheet Planning is one of the Financial Services Balance Sheet Planning is one of the financial service...
Unspecified Vulnerability in Oracle Financial Services Balance Sheet Planning Component (CNVD-2018-01702)
Oracle Financial Services Applications is a suite of financial services software from Oracle that combines core banking, online banking, and property management.Oracle Financial Services Balance Sheet Planning is one of the Financial Services Balance Sheet Planning is one of the financial service...
Unspecified Vulnerability in Oracle Financial Services Liquidity Risk Management Component
Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and asset management. Oracle Financial Services Liquidity Risk Management is one of the financial services liquidity risk management component. A security vulnerability exists...
CVE-2017-13194
A vulnerability in the Android media framework libvpx related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201...
IBM WebSphere MQ Authentication Bypass Vulnerability (swg22005400)
IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been denied access. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Privilege escalation
An elevation of privilege vulnerability in the Android media framework libaudioservice. Product: Android. Versions: 8.0. Android ID A-65280854...