Horde_Image Remote Code Execution Vulnerability

HordeImage is an image editing package from Horde USA, which can provide color highlighting, image effect editing and other functions. A remote code execution vulnerability exists in HordeImage versions 2.0.0 through 2.5.1. A remote attacker could exploit this vulnerability to execute code...

Apache Solr Kerberos Plugin Remote Elevation of Privilege Vulnerability

Apache Solr is the United States Apache Apache Software Foundation of a search server based on Lucene a full-text search engine architecture, which supports the level of search , vertical search , highlighting search results , a variety of output formats , etc. Kerberos plugin is one of the netwo...

UBUNTU-CVE-2017-0752

A elevation of privilege vulnerability in the Android framework windowmanager. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62196835...

GoAhead Denial of Service Vulnerability

GoAhead is the United States Embedthis company a small embedded Web server , it supports embedded in a variety of devices and applications . A denial of service vulnerability exists in the 'websDecodeUrl' function of the http.c file in GoAhead versions 3.4.0 through 3.6.5. An attacker can exploit...

SimpleSAMLphp Information Disclosure Vulnerability

SimpleSAMLphp is a PHP authentication application that implements the SAML2.0 service provider and identity provider functionality . An information disclosure vulnerability exists in SimpleSAMLphp versions 1.7.0 through 1.14.10, which can be exploited by attackers to obtain sensitive information...

PT-2017-12602 · Apache +2 · Apache Tomcat +2

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 7.0.0 through 7.0.80 Description: The issue allows bypassing security constraints and/or viewing the source code of JSPs for resources served by the VirtualDirContext using a specially crafted request. This is possible...

Intercom MaLion for Windows and Mac Authentication Bypass Vulnerability

Intercom MaLion for Windows and MaLion for Mac are both products of Intercom Japan. Intercom MaLion for Windows is an IT asset management solution based on the Windows platform. maLion for Mac is a version based on the Mac platform. A security vulnerability exists in Intercom MaLion versions 5.0....

Intercom MaLion for Windows and Mac Hard-Coded Encryption Key Vulnerability

Intercom MaLion for Windows and MaLion for Mac are both products of Intercom Japan. Intercom MaLion for Windows is an IT asset management solution based on the Windows platform. maLion for Mac is a version based on the Mac platform. A security vulnerability exists in Intercom MaLion versions 3.2....

Zoho ManageEngine OpManager Encryption Algorithm Vulnerability

Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A security vulnerability exists in Zoho ManageEngine OpManager versions 11 through 12.2. An attacker can exploit the vulnerability to decode certificates...

VICIdial user_authorization command execution vulnerability

ICIdial is based on the Asterisk open source PBX system is a more complete handling of a large number of inbound and outbound call center software package, initially funded by Digium for research and development, to the open source community to maintain in order to extend the Asterisk application...

CVE-2016-8951

IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to a denial of service attack. An attacker can exploit a vulnerability in the authentication features that could log out users and flood user accounts with emails. IBM X-Force ID: 118838...

Microsoft Office Remote Code Execution Vulnerability - Mac OS X (KB3212224)

This host is missing an important security update according to Microsoft KB3212224 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2017-2146

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu...

CVE-2017-2144

Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page...

CVE-2017-1328

IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by improper handling of security policy. By crafting a suitable request, an attacker could exploit this vulnerability to bypass security and use the vulnerable API. IBM X-Force ID:...

IBM WebSphere MQ Denial of Service Vulnerability (CNVD-2017-13819)

IBM MQ formerly known as IBM WebSphere MQ is a messaging middleware product from IBM. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A denial of service vulnerability exists in IBM MQ versions 8.0.0.0 through 8.0.0.5, 9.0.1, and...

BSA-2017-317

Security Advisory ID : BSA-2017-317 Component : Apache Tomcat Revision : 2.0: Interim In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the send file processing completed quickly, it was...

c-ares NAPTR parser out-of-bounds access vulnerability

c-ares is a C library for asynchronous execution of DNS requests and name resolution. A security vulnerability exists in c-ares versions 1.8.0 through 1.12.0. An attacker could exploit the vulnerability to obtain sensitive information or cause a denial of service...

PT-2017-2282 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 4.11.5 Linux Kernel versions 2.6.23 through 4.11.5 Description: The issue is related to the implementation of the Stack Guard-Page mechanism in the Linux Kernel, which does not properly check the values of...

Eclipse Mosquitto Security Bypass Vulnerability

Eclipse Mosquitto is an open source messaging agent software from the Eclipse Foundation . A security bypass vulnerability exists in Eclipse Mosquitto versions 0.15 through 1.4.11. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...