WatchGuard Fireware Cross-Site Scripting Vulnerability

WatchGuard Fireware XTM is a firewall appliance from WatchGuard, Inc. that provides intrusion protection, spam filtering, SSL VPN, and more through intelligent layering technology.WatchGuard Fireware is the firmware of... A cross-site scripting vulnerability exists in versions of WatchGuard...

WordPress Crony Cronjob Manager Plugin Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports the PHP and MySQL servers to set up a personal blog site.Crony Cronjob Manager plugin is one of the plug-ins used to create and manage Cronjobs. A cross-site request...

GNU Emacs Remote Code Execution Vulnerability

GNU Emacs is a Unix text editor written in C developed by the GNU Project, which supports syntax highlighting, multiple languages and feature extensions. A security vulnerability exists in versions of GNU Emacs prior to 25.3. The vulnerability can be exploited by a remote attacker to execute...

DEBIAN-CVE-2017-12901

The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrpprint...

CVE-2017-13010

The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:lstrnstart...

Tcpdump BGP parser buffer overflow vulnerability (CNVD-2017-28240)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.BGP parser is one of the border gateway protocol parsers. A buffer...

Tcpdump IPv6 mobility parser buffer overflow vulnerability (CNVD-2017-28284)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.IPv6 mobility parser is one of the IPv6 mobility parsers. A buffer...

Tcpdump LLDP Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.LLDP parser is one of the link layer discovery protocol parsers. A...

kamailio Privilege Acquisition Vulnerability

kamailio is an open source GPL-based SIP Session Initiation Protocol, Session Initiation Protocol server developed by the FhG FOKUS Institute in Germany . A security vulnerability exists in kamailio versions prior to 4.3.0. An attacker can exploit this vulnerability to gain privileges...

UBUNTU-CVE-2017-13021

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6print...

UBUNTU-CVE-2017-13053

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...

libzip '_zip_read_eocd64' function denial of service vulnerability

libzip is a C library for reading, creating and modifying zip archives developed by software developers Dieter Baron and Thomas Klausner. A security vulnerability exists in the 'zipreadeocd64' function of the zipopen.c file in versions of libzip prior to 1.3.0. A remote attacker can exploit this...

Ansible chroot, jail and zone connection plugin backlink vulnerability

Ansible is a computer system configuration manager that can be used to publish, manage, and orchestrate computer systems. chroot, jail, and zone connection are among the plug-ins. chroot is a root directory modification plug-in; jail is a process or application restriction plug-in; and zone...

pngcrush double release vulnerability

pngcrush is a set of PNG image compression tools. The tool supports batch compression of images in PNG format. A double release vulnerability exists in the png.c file and sPLT chunk structure in versions of pngcrush prior to 1.7.87. No detailed vulnerability details are provided at this time...

mpg123 'INT123_parse_new_id3' function integer overflow vulnerability

mpg123 on 32-bit platforms is a MPEG audio player and decoding library for 32-bit operating systems developed by software developer Michael Hipp.ID3 parser is one of the ID3 parsers. An integer overflow vulnerability exists in the 'INT123parsenewid3' function of the ID3 parser in versions of mpg1...

PT-2017-5755 · Joomla · Googlemaps Plugin

Name of the Vulnerable Software and Affected Versions: Googlemaps plugin versions prior to 3.1 for Joomla! Description: The issue is related to a cross-site scripting XSS vulnerability. This type of vulnerability allows an attacker to inject malicious scripts into a website, potentially leading t...

CVE-2017-12077

Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager SRM before 1.1.4-6509 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack...

CVE-2017-9555

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.0-3414 allows remote attackers to inject arbitrary web script or HTML via the image parameter...

UBUNTU-CVE-2017-12791

Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2017-222740)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security bypass vulnerability exists in versions of Mozilla Firefox prior to 55. A remote attacker could use this vulnerability to bypass security restrictions and perform unauthorized...