4750 matches found
CVE-2018-3295
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
UBUNTU-CVE-2018-3295
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
UBUNTU-CVE-2018-3296
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
UBUNTU-CVE-2018-16737
tinc before 1.0.30 has a broken authentication protocol, without even a partial mitigation...
ScreenOS: Stored Cross-Site Scripting (XSS) vulnerability
A persistent cross-site scripting vulnerability in the graphical user interface of ScreenOS may allow a remote authenticated user to inject web script or HTML and steal sensitive data and credentials from a web administration session, possibly tricking a follow-on administrative user to perform...
Linux kernel KVM denial of service vulnerability (CNVD-2018-20467)
Linux kernel is the kernel used by the operating system Linux released by the Linux Foundation in the U.S. KVM is one of the kernel-based virtual machines. A security vulnerability exists in the t.c file of the KVM in versions of Linux kernel prior to 4.18.12 on the arm64 platform, which arises...
CVE-2018-17872
Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions...
CVE-2018-6502
A potential Reflected Cross-Site Scripting XSS Security vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for Reflected Cross-site Scripting XSS...
Snap Creek Duplicator PHP Code Injection Vulnerability
Snap Creek Duplicator is a tool for migrating and backing up WordPress websites. A security vulnerability exists in Snap Creek Duplicator versions prior to 1.2.42. The vulnerability can be exploited by accessing the installer.php file and installer-backup.php file to inject PHP code into the...
Google Chrome Blink Buffer Overflow Vulnerability (CNVD-2019-03614)
Google Chrome is a web browser developed by Google Inc. Blink is a browser layout engine rendering engine jointly developed by Google Inc. and Opera Software of Norway. A buffer overflow vulnerability exists in Blink in versions of Google Chrome prior to 69.0.3497.81. The vulnerability can be...
Google Chrome Autofill Information Disclosure Vulnerability
Google Chrome is the United States Google Google company developed a Web browser. Autofill is one of the auto-fill form plug-ins. An information disclosure vulnerability exists in Autofill in versions of Google Chrome prior to 69.0.3497.81, which can be exploited by remote attackers to obtain...
OpenSC Out-of-Bounds Read Vulnerability
OpenSC is a set of software tools and libraries for smart cards, focusing on smart cards with cryptographic capabilities. OpenSC prior to 0.19.0-rc1 suffers from an out-of-bounds read vulnerability when processing responses. An attacker could exploit this vulnerability to cause the opensc library...
PT-2018-16204 · Unknown · Simplehttpserver
Name of the Vulnerable Software and Affected Versions: simplehttpserver versions prior to 0.2.1 Description: The issue allows for path traversal, enabling the listing of any file on the server. Recommendations: For versions prior to 0.2.1, update to version 0.2.1 or later to resolve the issue...
Google Chrome Skia Information Disclosure Vulnerability (CNVD-2018-20145)
Google Chrome is a web browser developed by Google, Inc. Skia is an open source 2D graphics library that provides common APIs that work on a variety of hardware and software platforms. A security vulnerability exists in Skia in versions of Google Chrome prior to 63.0.3239.84. A remote attacker...
xkbcommon null pointer dereference vulnerability (CNVD-2019-02661)
xkbcommon is a keyboard key mapping compiler and support library. A null pointer dereference vulnerability exists in versions of xkbcommon prior to 0.8.1, which stems from a program that incorrectly handles the xkbFile in the xkbgeometry section, and which can be exploited by a local attacker to...
Unspecified vulnerability in Joyent Node.js (CNVD-2019-42560)
Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...
LibreHealthIO LH-EHR Local File Disclosure Vulnerability
LibreHealthIO LH-EHR is an open source electronic health record and medical practice management application. A local file disclosure vulnerability exists in the import of templates in versions prior to LibreHealthIO LH-EHR REL-2.0.0. An attacker can exploit this vulnerability to disclose sensitiv...
PYSEC-2018-66
The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON data in incorrect encoding. Th...
HPE 3PAR Service Processor Remote Code Execution Vulnerability
HPE 3PAR Service Processor SP is a suite of virtual service processors deployed on the VMware vSphere hypervisor from Hewlett Packard Enterprise HPE, USA. A remote code execution vulnerability exists in versions prior to HPE 3PAR SP SP-4.4.0.GA-110 MU7 that can be exploited by a remote attacker t...