CVE-2017-14369

RSA Archer GRC Platform prior to 6.2.0.5 is affected by a privilege escalation vulnerability. A low privileged RSA Archer user may potentially exploit this vulnerability to elevate their privileges and export certain application records...

Piwigo Access Restriction Bypass Vulnerability

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time, and more. An access restriction bypass vulnerability exists in the urlcheckformat in the include/functions.inc.php file in version...

UBUNTU-CVE-2014-9474

Buffer overflow in the mpfrstrtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have unspecified impact via vectors related to incorrect documentation for mpnsetstr...

YADIFA DNS Packet Parser Denial of Service Vulnerability

YADIFA is a lightweight authoritative name server with DNSSEC capabilities.DNS packet parser is one of the Domain Name System DNS resolvers. A security vulnerability exists in the DNS packet parser in versions of YADIFA prior to 2.2.6, which stems from the program failing to detect the presence o...

WordPress Simple Student Result Authentication Bypass Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . Simple Student Result plugin is one of the student performance management system plugin . An authentication bypass...

UBUNTU-CVE-2017-13723

In X.Org Server aka xserver and xorg-server before 1.19.4, a local attacker authenticated to the X server could overflow a global buffer, causing crashes of the X server or potentially other problems by injecting large or malformed XKB related atoms and accessing them via xkbcomp...

DEBIAN-CVE-2015-6748

Cross-site scripting XSS vulnerability in jsoup before 1.8.3...

New Relic .NET Agent SQL Injection Vulnerability

New Relic .NET Agent is a . A SQL injection vulnerability exists in New Relic .NET Agent versions prior to 6.3.123.0. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

WatchGuard Fireware Cross-Site Scripting Vulnerability

WatchGuard Fireware XTM is a firewall appliance from WatchGuard, Inc. that provides intrusion protection, spam filtering, SSL VPN, and more through intelligent layering technology.WatchGuard Fireware is the firmware of... A cross-site scripting vulnerability exists in versions of WatchGuard...

WordPress Crony Cronjob Manager Plugin Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports the PHP and MySQL servers to set up a personal blog site.Crony Cronjob Manager plugin is one of the plug-ins used to create and manage Cronjobs. A cross-site request...

GNU Emacs Remote Code Execution Vulnerability

GNU Emacs is a Unix text editor written in C developed by the GNU Project, which supports syntax highlighting, multiple languages and feature extensions. A security vulnerability exists in versions of GNU Emacs prior to 25.3. The vulnerability can be exploited by a remote attacker to execute...

DEBIAN-CVE-2017-12901

The EIGRP parser in tcpdump before 4.9.2 has a buffer over-read in print-eigrp.c:eigrpprint...

CVE-2017-13010

The BEEP parser in tcpdump before 4.9.2 has a buffer over-read in print-beep.c:lstrnstart...

Tcpdump IPv6 mobility parser buffer overflow vulnerability (CNVD-2017-28284)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.IPv6 mobility parser is one of the IPv6 mobility parsers. A buffer...

Tcpdump BGP parser buffer overflow vulnerability (CNVD-2017-28240)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.BGP parser is one of the border gateway protocol parsers. A buffer...

Tcpdump LLDP Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.LLDP parser is one of the link layer discovery protocol parsers. A...

UBUNTU-CVE-2017-13053

The BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decodertroutinginfo...

UBUNTU-CVE-2017-13021

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6print...

kamailio Privilege Acquisition Vulnerability

kamailio is an open source GPL-based SIP Session Initiation Protocol, Session Initiation Protocol server developed by the FhG FOKUS Institute in Germany . A security vulnerability exists in kamailio versions prior to 4.3.0. An attacker can exploit this vulnerability to gain privileges...

Ansible chroot, jail and zone connection plugin backlink vulnerability

Ansible is a computer system configuration manager that can be used to publish, manage, and orchestrate computer systems. chroot, jail, and zone connection are among the plug-ins. chroot is a root directory modification plug-in; jail is a process or application restriction plug-in; and zone...