DEBIAN-CVE-2017-9462

In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name...

Lenovo Service Bridge Local Code Execution Vulnerability

Lenovo Service Bridge is a Windows program from the Chinese company Lenovo Lenovo that automatically detects the serial number and model number of your device. A local code execution vulnerability exists in versions prior to Lenovo Service Bridge 4. An attacker could exploit this vulnerability to...

Five fingers CMS system s parameters exist arbitrary file download vulnerability

Five Fingers CMS is an open source content management system suitable for portals, corporate website builders, mobile websites and microblogging promotion. Five Fingers CMS system version 4.0.0 there are arbitrary file download vulnerabilities. Due to the failure of effective filtering parameters...

Lenovo Service Bridge Spoofing Vulnerability

Lenovo Service Bridge is a Windows program from the Chinese company Lenovo Lenovo that automatically detects the serial number and model number of your device. A spoofing vulnerability exists in the signature verification logic in code signing certificates in versions prior to Lenovo Service Brid...

UBUNTU-CVE-2014-9983

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...

CHICKEN Scheme Denial of Service Vulnerability

CHICKEN Scheme is a compiler and interpreter based on the Scheme language , it can compile Scheme code into standard C code , and supports extensions . A denial of service vulnerability exists in CHICKEN Scheme versions prior to 4.13. An attacker can exploit this vulnerability by passing an...

PT-2017-2221 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.11.1 Description: The issue exists due to insufficient input validation in the tcp v6 syn recv sock function. This can be exploited by a local user to cause a denial of service or possibly have other unspecifi...

DEBIAN-CVE-2017-9059

The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service resource consumption by leveraging improper channel callback shutdown when unmounting an NFSv4 filesystem, aka a "module reference and kernel daemon" leak...

GNU oSIP libosip2 Denial of Service Vulnerability (CNVD-2017-07201)

GNU oSIP is a library developed by the GNU Project to provide developers with an interface to multimedia and communications. libosip2 is a standard library for multithreading safety written in C. It is a library that is used in the GNU Project. A denial of service vulnerability exists in the...

PT-2017-17974 · Dolibarr · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP/CRM version 4.0.4 Description: The issue is related to a Cross-Site Scripting XSS problem. It occurs in the doli/societe/list.php file through the sall parameter. This allows for potential malicious script injection...

SolarWinds Log and Event Manager Postgres Database Security Bypass Vulnerability

SolarWinds Log and Event Manager is a log and event manager that provides real-time log analysis, memory event correlation, and threat attack response. A security bypass vulnerability exists in the Postgres database of SolarWinds Log and Event Manager 6.3.1, which stems from the database having a...

Linux kernel denial of service vulnerability (CNVD-2017-05878)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the drivers/media/usb/dvb-usb/cxusb.c file in Linux kernel versions 4.10.x prior to 4.10.12 and in 4.9.x versions. A local attacker...

Linux kernel denial of service vulnerability (CNVD-2017-05874)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the drivers/char/virtioconsole.c file in Linux kernel versions 4.10.x prior to 4.10.12 and 4.9.x due to the program failing to...

UBUNTU-CVE-2017-8065

crypto/ccm.c in the Linux kernel 4.9.x and 4.10.x through 4.10.12 interacts incorrectly with the CONFIGVMAPSTACK option, which allows local users to cause a denial of service system crash or memory corruption or possibly have unspecified other impact by leveraging use of more than one virtual pag...

SUSE-SU-2017:1047-1 Security update for ntp

This ntp update to version 4.2.8p10 fixes serveral issues. This updated enables leap smearing. See /usr/share/doc/packages/ntp/README.leapsmear for details. Security issues fixed bsc1030050: - CVE-2017-6464: Denial of Service via Malformed Config - CVE-2017-6462: Buffer Overflow in DPTS Clock -...

Linux kernel local elevation of privilege vulnerability (CNVD-2017-05961)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local elevation of privilege vulnerability exists in Linux Kernel version 4.8.0 udev 232. A local attacker can exploit this vulnerability to gain elevated privileges...

UBUNTU-CVE-2015-8107

Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code...

DEBIAN-CVE-2017-7596

LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted image...

ALPINE-CVE-2017-7594

The OJPEGReadHeaderInfoSecTablesDcTable function in tifojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service memory leak via a crafted image...

CVE-2016-6022

IBM Quality Manager RQM 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 20007...