6118 matches found
Cisco IOS Software and IOS XE Software Input Validation Vulnerability
Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the Internet Key Exchange Version 1 IKEv1 feature implementation in Cisco IOS Software and IOS XE Software, which arises from the program faili...
CVE-2018-0159
A vulnerability in the implementation of Internet Key Exchange Version 1 IKEv1 functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The vulnerability is...
PT-2018-1188 · Cisco · Cisco Ios Xe +1
Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the implementation of Internet Key Exchange Version 1 IKEv1 functionality could allow an unauthenticated, remote attacker to cause an...
OPENSUSE-SU-2018:0813-1 Security update for nginx
This update for nginx to version 1.13.9 fixes the following issues: - CVE-2017-7529: nginx: Integer overflow in nginx range filter module allowed memory disclosure bsc1048265 This update also contains all updates and improvements in 1.13.9 upstream release...
UBUNTU-CVE-2018-1294
If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...
CVE-2018-7473
Open redirect vulnerability in the SO Connect SO WIFI hotspot web interface, prior to version 140, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL...
Arbitrary File Deletion Vulnerability in Light CMS Version 1.7
Light CMS is an intelligent website building system built in PHP+MYSQL environment. Light CMS 1.7 version of the arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete any file within the site...
Servicing stack update for Windows 10 Version 1709: March 5, 2018
None None...
NASA Kodiak Code Execution Vulnerability
NASA Kodiak is a library for verifying nonlinear algorithms. A security vulnerability exists in the data handling functions in NASA Kodiak version 1.0. A remote attacker could exploit the vulnerability to execute code with the help of untrusted files...
NASA Singledop Library Code Execution Vulnerability
NASA Singledop is a software module written in Python for retrieving low-level 2D wind fields from actual or simulated Doppler radar data.NASA Singledop library Weather data is one of the libraries. The NASA Singledop library in NASA Singledop version 1.0 suffers from a security vulnerability. A...
FreeXL Heap Buffer Out-of-Bounds Read Vulnerability
FreeXL is an open source library for extracting valid data from Excel .xls spreadsheets developed by software developer Alessandro Furieri. A heap buffer out-of-bounds read vulnerability exists in the 'readminibiffnextrecord' function in versions of FreeXL prior to 1.0.5. An attacker could exploi...
CVE-2017-8976
A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found...
CVE-2017-8977
A Remote Denial of Service vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found...
CVE-2018-2369
Under certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access information which would otherwise be restricted. An attacker can misuse the authentication function of the SAP HANA server on its SQL interface and disclose 8 bytes of the server process memory. The attack...
PT-2018-15507 · Sap · Sap Hana Extended Application Services
Name of the Vulnerable Software and Affected Versions: SAP HANA Extended Application Services version 1.0 Description: A controller user with SpaceAuditor authorization in a specific space could retrieve sensitive application data, such as service bindings, within that space. Recommendations: For...
Arbitrary File Editing Vulnerability in UCMS Version 1.2
UCMS is a simple open source content management system. UCMS 1.2 version of the existence of arbitrary file editing vulnerability, the attacker can edit the non-existent script file, directly write a sentence Trojan horse, to obtain control of the web server...
Online Voting System Authentication Bypass Vulnerability
Online Voting System is an online voting system. A security vulnerability exists in the profile section of Online Voting System version 1.0. The vulnerability can be exploited by an attacker to set passwords for other accounts...
SimpleSAML php Signature Validation Bypass Vulnerability
SimpleSAMLphp is a set of PHP authentication applications that implement the SAML 2.0 service provider and identity provider features . A signature verification bypass vulnerability exists in the SimpleSAMLXMLValidator class in SimpleSAMLphp 1.14.16 and earlier versions using SAML 1.1. An attacke...