VulnCheck KEV: CVE-2017-0143

Microsoft Windows Server Message Block 1.0 SMBv1 contains an unspecified vulnerability that allows for remote code execution...

CVE-2017-6180

Keekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery Vulnerability affecting goform/formChnUserPwd and goform/formUserMng and the entire set of other pages...

SQL Injection Vulnerability in CWCMS v1.0

CWCMS is an enterprise website management system. A SQL injection vulnerability exists in version 1.0 of the CwCMS-PHP Enterprise Website Management System. It allows attackers to exploit the vulnerability to gain access to sensitive database information...

UBUNTU-CVE-2016-9955

The SimpleSAMLXMLValidator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly cause a denial of service memory consumption by leveraging improper conversion of return values to boolean...

CVE-2016-9354

An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of Uncontrolled Resource Consumption...

My Click Counter Authentication Bypass Vulnerability

My Click Counter is a PHP-based click counter that can also be used as a download counter. An authentication bypass vulnerability exists in the administrator login page of My Click Counter version 1.0, which can be exploited by attackers to gain administrator privileges...

SQL injection vulnerability in type_id parameter of php+sqlite responsive article management system version v1.0

php+sqlite responsive article management system is a mobile article management system developed in php. php+sqlite responsive article management system v1.0 version typeid parameter SQL injection vulnerability , because the program fails to effectively filter the typeid parameter , allowing...

zlib denial of service vulnerability (CNVD-2016-13297)

zlib is a compression library used by many applications to provide data compression/decompression routines. A denial of service vulnerability exists in zlib version 1.2.8. An attacker can exploit this vulnerability to cause an affected application to crash, resulting in a denial of service...

Orthanc DICOM Server Remote Memory Corruption Vulnerability

Orthanc DICOM Server is a DICOM image server that can be used to store all kinds of DICOM image files CT, CR, DR, DX, MR, US... It can be used to store all kinds of DICOM image files CT, CR, DR, MR, US.... Orthanc DICOM Server version 1.1.0 suffers from a remote memory corruption vulnerability th...

File Upload Vulnerability in Jtbccms V1.0

Jtbccms is a website system that can expand and clone existing modules. A file upload vulnerability exists in version 1.0 of jtbccms. Due to the background file management office did not verify the uploaded files, resulting in the upload of arbitrary files, serious server privileges can be obtain...

Jtbccms V1.0 'jtbc_cms_admin_manage_delete_filedisp()' function has a file deletion vulnerability

Jtbccms is a website system that can expand and clone existing modules. Jtbccms version 1.0 'jtbccmsadminmanagedeletefiledisp' function has a file deletion vulnerability. Due to receiving filepath variable to do iicstr function for adslashes filtering, the code conversion can be directly deleted ...

DEBIAN-CVE-2015-3418

The ProcPutImage function in dix/dispatch.c in X.Org Server aka xserver and xorg-server before 1.16.4 allows attackers to cause a denial of service divide-by-zero and crash via a zero-height PutImage request...

OpenJPEG Remote Heap Buffer Overflow Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A remote heap buffer overflow vulnerability exists in OpenJPEG versions 1.3 and 1.5.1. An attacker could exploit this vulnerability to execute arbitrary code in the context of a user-run application, which could also result in a denial of servic...

TP-LINK TDDP Buffer Overflow Vulnerability

TP-LINK TDDP is a device commissioning protocol. A buffer overflow vulnerability exists in TP-LINK TDDP. An attacker can exploit the vulnerability to execute arbitrary code by sending a manually constructed "set configuration" message containing v1 packets to the TDDP service...

Git for Windows Untrusted Search Path Vulnerability

Git for Windows is a free, open source distributed version control system based on Windows developed by American software developer Linus Torvalds Linus Torvalds. An untrustworthy search path vulnerability exists in version 1.x of Git for Windows. This vulnerability can be exploited by a local...

libcsp library buffer overflow vulnerability (CNVD-2016-10598)

The libcsp library is a small network layer transport protocol library designed for Cubesats small protocol stacks written in C. A buffer overflow vulnerability exists in the zmq interface in the cspifzmqhub.c file in libcsp library v1.4 and earlier versions, which can be exploited by an attacker...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2016-10572)

Freefloat FTP Server is a free software package for uploading files and managing wired and wireless devices from the Swedish company Freefloat. A buffer overflow vulnerability exists in version 1.0 of FreeFloat FTP Server. A remote attacker can exploit this vulnerability to execute arbitrary code...

libcsp library buffer overflow vulnerability (CNVD-2016-10597)

The libcsp library is a small network layer transport protocol library designed for Cubesats small protocol stacks written in C. A buffer overflow vulnerability exists in the cspsfprecvfp function in the cspsfp.c file in libcsp library v1.4 and earlier versions, which can be exploited by an...

ESPCMS has a database file download vulnerability

ESSENCE ESPCMS website management system based on LAMP development and construction of the website management system. ESPCMS has a database file download vulnerability. Due to logging into the background and clicking upgrade, the system will automatically backup the database data, the backup file...

libcsp library buffer overflow vulnerability

The libcsp library is a small network layer transport protocol library designed for Cubesats small protocol stacks written in C. A buffer overflow vulnerability exists in the cspcanprocessframe in the cspifcan.c file in libcsp library v1.4 and earlier. An attacker can exploit this vulnerability t...