4599 matches found
VirtualBox Denial of Service Vulnerability
Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...
DEBIAN-CVE-2018-14347
GNU Libextractor before 1.7 contains an infinite loop vulnerability in EXTRACTORmpegextractmethod mpegextractor.c...
Synology Universal Search Highlight Preview License Vulnerability
Synology Universal Search is a software from Synology for searching applications and files in Synology NAS.Highlight Preview is one of the highlighted components. A security vulnerability exists in Highlight Preview in Synology Universal Search versions prior to 1.0.5-0135. A remote attacker can...
CVE-2018-13981
The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code execution due to a default component that permits arbitrary upload of PHP files, because the formmailer widget blocks .php files but not .php5 or .phtml files. This is related t...
Joyent Node.js macaddress module command injection vulnerability
Joyent Node.js is the United States Joyent company's set of built on Google V8 JavaScript engine on top of the web application platform. macaddress module is used in one of the Mac address management module. A command injection vulnerability exists in Joyent Node.js macaddress module versions pri...
Haxx curl 'curl_smtp_escape_eob' function heap buffer overflow vulnerability
Haxx curl is a set of file transfer tools from the Swedish company Haxx that work on the command line using URL syntax, the tool supports file uploads and downloads, and includes a libcurl client-side URL transfer library for program development. A heap buffer overflow vulnerability exists in the...
CVE-2018-0042
Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an information disclosure vulnerability...
Joplin Cross-Site Scripting Vulnerability
Joplin is an open source document note-taking application based on the Markdown format. The program supports copying, marking and modification of text and so on. A cross-site scripting vulnerability exists in the Note content field in versions of Joplin prior to 1.0.90. A remote attacker can...
CVE-2018-7776
The vulnerability exists within error.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. System information is returned to the attacker that contains sensitive data...
CVE-2018-7773
The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the sessionid input parameter...
Nagios Fusion Cross-Site Scripting Vulnerability
Nagios Fusion is a suite of IT infrastructure visualization and monitoring solutions from the US-based Nagios Corporation. The solution supports centralized management of decentralized Nagios monitoring servers and provides a visual interface. A cross-site scripting vulnerability exists in Nagios...
CVE-2018-0606
SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2017-7568
NetApp OnCommand Unified Manager for 7-Mode core package versions prior to 5.2.3 may disclose sensitive LDAP account information to authenticated users when the LDAP authentication configuration is tested via the user interface...
Forms Cross-Site Scripting Vulnerability
Forms is a tool for creating, parsing and validating forms in Node.js. A cross-site scripting vulnerability exists in Forms versions prior to 1.3.0, which stems from the program's failure to properly escape HTML and can be exploited by a remote attacker to inject arbitrary web script or HTML...
McAfee Network Security Management User Password Cracking Vulnerability
McAfee Network Security Management NSM is a suite of network security solutions from McAfee that enables real-time monitoring of deployed McAfee intrusion prevention systems across the network. A security vulnerability exists in the certificate-less authentication mechanism in McAfee NSM versions...
Matrix Synapse Event Filtering Vulnerability
Matrix is a set of open communication networks of which Synapse is a server implementation. A security vulnerability exists in the 'ongetmissingevents' function in the handlers/federation.py file in Matrix Synapse versions prior to 0.31.1. No details of the vulnerability are provided at this time...
DEBIAN-CVE-2018-5184
Using remote content in encrypted messages can lead to the disclosure of plaintext. This vulnerability affects Thunderbird ESR 52.8 and Thunderbird 52.8...
CVE-2017-7806
A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content, resulting in a potentially exploitable crash. This vulnerability affects Firefox 55...
keystone node module authentication bypass vulnerability
The keystone node module is a set of web application frameworks. A security vulnerability exists in keystone node module versions prior to 0.3.16. The vulnerability can be exploited to bypass authentication by providing the correct password and a partial e-mail address...