PowerDNS Recursor Denial of Service Vulnerability (CNVD-2018-23738)

PowerDNS Recursor aka pdnsrecursor is a domain name resolution server from the Dutch company PowerDNS. A security vulnerability exists in PowerDNS Recursor versions 4.0.0 through 4.1.4. A remote attacker can exploit this vulnerability by sending DNS queries to cause a denial of service...

CVE-2018-17918

Circontrol CirCarLife all versions prior to 4.3.1, authentication to the device can be bypassed by entering the URL of a specific page...

kernel: Mishandled freeing of instances in pcrypt.c can allow a local user to cause a denial of service

crypto/pcrypt.c in the Linux kernel, before 4.14.13, mishandles freeing instances, allowing a local user able to access the AFALG-based AEAD interface CONFIGCRYPTOUSERAPIAEAD and pcrypt CONFIGCRYPTOPCRYPT to cause a denial of service kfree of an incorrect pointer or possibly have unspecified othe...

CVE-2018-18733

An XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar issue to CVE-2018-13999...

CVE-2018-18739

An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSProducts.php?lgid=1 Keywords field...

CVE-2018-18651

An issue was discovered in Xpdf 4.00. catalog-getNumPages in AcroForm.cc allows attackers to launch a denial of service hang caused by large loop via a specific pdf file, as demonstrated by pdftohtml. This is mainly caused by a large number after the /Count field in the file...

HPE Service Governance Framework Information Disclosure Vulnerability

HPE Service Governance Framework SGF is a service governance framework from Hewlett Packard Enterprise HPE. An information disclosure vulnerability exists in HPE SGF versions 4.2 and 4.3. A remote attacker could exploit this vulnerability to disclose information...

PT-2018-14470 · Foolabs +2 · Xpdf +2

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.00 Description: The issue allows remote attackers to cause a denial of service via a crafted pdf file. This is due to a stack-based buffer over-read in the function Object::isName in Object.h, which is called from...

CVE-2018-12818

Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. Successful exploitation could lead to information disclosure...

LAquis SCADA Out-of-Bounds Read Vulnerability

LAquis SCADA is a suite of SCADA software for monitoring and data acquisition. An out-of-bounds read vulnerability exists in LAquis SCADA version 4.1.0.3870 and earlier versions that can be exploited by remote attackers to execute code...

Code Execution Vulnerability in ThinkSNS V4

ThinkSNS is an open source social system under Wise Software Beijing Co. A code execution vulnerability exists in ThinkSNS V4, which can be exploited by an attacker to gain control of the web server...

Intel QuickAssist Technology for Linux Access Control Error Vulnerability

Intel QuickAssist Technology for Linux is a Linux-based data management technology from Intel Corporation that enhances the security and compression of dynamic and static data in cloud, network, big data and storage applications. An Access Control Error vulnerability exists in the driver stack in...

CVE-2018-2471

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted...

SQL Injection Vulnerability in Five Fingers CMS v4.1.0

Five fingers CMS is a high-performance open source content management system , support for LNAMP architecture . Five Fingers CMS v4.1.0 SQL injection vulnerability exists , the vulnerability stems from the failure to filter ca.php file in the groupname parameter , an attacker can use the...

CVE-2018-15391

A vulnerability in certain IPv4 fragment-processing functions of Cisco Remote PHY Software could allow an unauthenticated, remote attacker to impact traffic passing through a device, potentially causing a denial of service DoS condition. The vulnerability is due to the affected software not...

DEBIAN-CVE-2018-16586

In Open Ticket Request System OTRS 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a logged in user opens it, the email could cause the browser to load external image or CSS resources...

UBUNTU-CVE-2018-16586

In Open Ticket Request System OTRS 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a logged in user opens it, the email could cause the browser to load external image or CSS resources...

MCMS Cross-Site Request Forgery Vulnerability

MCMS is a Java rapid development platform based on Spring, SpringMVC, Mybatis . A cross-site request forgery vulnerability exists in the ms/basic/manager/save.do file in MCMS version 4.6.5, which can be exploited by a remote attacker to add an administrator account...

CVE-2018-17366

An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...

Simple POS SQL Injection Vulnerability

Simple POS is a sales system based on PHP and jQuery. The system supports tax calculation, printing receipts and supports barcode scanning. An SQL injection vulnerability exists in the administration panel in Simple POS version 4.0.24. A remote attacker can exploit the vulnerability by sending th...