UBUNTU-CVE-2018-1294

If a user of Apache Commons Email typically an application programmer passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details recipients, contents, etc. might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You...

CVE-2018-7473

Open redirect vulnerability in the SO Connect SO WIFI hotspot web interface, prior to version 140, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL...

Arbitrary File Deletion Vulnerability in Light CMS Version 1.7

Light CMS is an intelligent website building system built in PHP+MYSQL environment. Light CMS 1.7 version of the arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete any file within the site...

Servicing stack update for Windows 10 Version 1709: March 5, 2018

None None...

NASA Kodiak Code Execution Vulnerability

NASA Kodiak is a library for verifying nonlinear algorithms. A security vulnerability exists in the data handling functions in NASA Kodiak version 1.0. A remote attacker could exploit the vulnerability to execute code with the help of untrusted files...

NASA Singledop Library Code Execution Vulnerability

NASA Singledop is a software module written in Python for retrieving low-level 2D wind fields from actual or simulated Doppler radar data.NASA Singledop library Weather data is one of the libraries. The NASA Singledop library in NASA Singledop version 1.0 suffers from a security vulnerability. A...

FreeXL Heap Buffer Out-of-Bounds Read Vulnerability

FreeXL is an open source library for extracting valid data from Excel .xls spreadsheets developed by software developer Alessandro Furieri. A heap buffer out-of-bounds read vulnerability exists in the 'readminibiffnextrecord' function in versions of FreeXL prior to 1.0.5. An attacker could exploi...

CVE-2017-8976

A Remote Code Execution vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found...

CVE-2017-8977

A Remote Denial of Service vulnerability in Hewlett Packard Enterprise Moonshot Provisioning Manager Appliance version v1.20 was found...

CVE-2018-2369

Under certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access information which would otherwise be restricted. An attacker can misuse the authentication function of the SAP HANA server on its SQL interface and disclose 8 bytes of the server process memory. The attack...

PT-2018-15507 · Sap · Sap Hana Extended Application Services

Name of the Vulnerable Software and Affected Versions: SAP HANA Extended Application Services version 1.0 Description: A controller user with SpaceAuditor authorization in a specific space could retrieve sensitive application data, such as service bindings, within that space. Recommendations: For...

Arbitrary File Editing Vulnerability in UCMS Version 1.2

UCMS is a simple open source content management system. UCMS 1.2 version of the existence of arbitrary file editing vulnerability, the attacker can edit the non-existent script file, directly write a sentence Trojan horse, to obtain control of the web server...

Online Voting System Authentication Bypass Vulnerability

Online Voting System is an online voting system. A security vulnerability exists in the profile section of Online Voting System version 1.0. The vulnerability can be exploited by an attacker to set passwords for other accounts...

SimpleSAML php Signature Validation Bypass Vulnerability

SimpleSAMLphp is a set of PHP authentication applications that implement the SAML 2.0 service provider and identity provider features . A signature verification bypass vulnerability exists in the SimpleSAMLXMLValidator class in SimpleSAMLphp 1.14.16 and earlier versions using SAML 1.1. An attacke...

CVE-2018-6291

WebConsole Cross-Site Scripting in Kaspersky Secure Mail Gateway version 1.1...

DEBIAN-CVE-2017-15133

A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections...

E.I Hi-Tech Professional Local Directory Script SQL Injection Vulnerability

E.I Hi-Tech Professional Local Directory Script is a set of PHP and MySQL based scripts for creating local directories from E.I Hi-Tech Technolgies, USA. A SQL injection vulnerability exists in version 1.0 of E.I Hi-Tech Professional Local Directory Script. A remote attacker can create a local...

RISE Ultimate Project Manager SQL Injection Vulnerability

Rise Ultimate Project Manager is a web-based project management system. A SQL injection vulnerability exists in RISE Ultimate Project Manager version 1.9. A remote attacker can exploit this vulnerability by sending the 'search' parameter to the index.php/knowledgebase/getarticlesuggestion/ file t...

FoxSash ImgHosting Search Engine Cross-Site Scripting Vulnerability

FoxSash ImgHosting is a set of scripts for online image hosting. search engine is one of the search engines. A cross-site scripting vulnerability exists in the search engine in FoxSash ImgHosting version 1.5. A remote attacker can exploit this vulnerability by sending the 'search' parameter to th...

Microsoft ASP.NET Core Cross-Site Request Forgery Vulnerability

Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. A cross-site request forgery vulnerability exists in Microsoft ASP.NET Core...