tcpdump: Buffer over-read in print-rt6.c:rt6_print() in IPv6 routing header parser

The IPv6 routing header parser in tcpdump before 4.9.2 has a buffer over-read in print-rt6.c:rt6print...

tcpdump: Buffer over-read in print-icmp6.c:icmp6_print() in ICMPv6 parser

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6print...

MetInfo Cross-Site Scripting Vulnerability (CNVD-2018-08331)

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site scripting vulnerability exists in the save.php file in MetInfo version 6.0. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML...

tcpdump: Buffer over-read in print-icmp6.c:icmp6_nodeinfo_print() in ICMPv6 parser

The ICMPv6 parser in tcpdump before 4.9.2 has a buffer over-read in print-icmp6.c:icmp6nodeinfoprint...

tcpdump: Buffer over-read in print-hncp.c:dhcpv6_print() in HNCP parser

The HNCP parser in tcpdump before 4.9.2 has a buffer over-read in print-hncp.c:dhcpv6print...

Square 9 GlobalForms SQL Injection Vulnerability

Square 9 GlobalForms is a web form management software from Square 9 Softworks. The software collects Web form data and automatically populates it with keywords. A SQL injection vulnerability exists in the 'match' parameter in Square 9 GlobalForms version 6.2.x. A remote attacker could use this...

CVE-2018-8820

An issue was discovered in Square 9 GlobalForms 6.2.x. A Time Based SQL injection vulnerability in the "match" parameter allows remote authenticated attackers to execute arbitrary SQL commands. It is possible to upgrade access to full server compromise via xpcmdshell. In some cases, the...

SAP Business Client Information Disclosure Vulnerability

SAP Business Client is a user management interface from SAP Germany. The product provides management interfaces for different SAP business applications for managing SAP products. A security vulnerability exists in SAP Business Client version 6.5. An attacker could exploit the vulnerability to...

DEBIAN-CVE-2018-8764

Roland Gruber Softwareentwicklung LDAP Account Manager before 6.3 places a CSRF token in the sectoken parameter of a URI, which makes it easier for remote attackers to defeat a CSRF protection mechanism by leveraging logging...

CVE-2017-1762

IBM Jazz Foundation IBM Rational Collaborative Lifecycle Management 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

Foxit MobilePDF for iOS Denial of Service Vulnerability

Foxit MobilePDF for iOS is China's Foxit Foxit software company's a cross iOS-based platform for mobile devices to use the PDF document reader. A denial of service vulnerability exists in the iOS-based Foxit MobilePDF application prior to version 6.1, which stems from the program's inability to...

Katello Remote Denial of Service Vulnerability

Katello and Red Hat Satellite are both system management products.Katello is a system management engine that provides workflows for configuration management, subscription management, and content management.Red Hat Satellite is a suite of system management platforms from Red Hat, USA, that extends...

SQL Injection Vulnerability in Amoy AspCMS v6.5

Taote AspCMS is a set of ASP-based content management system developed by Taote.com on the basis of its own platform and with reference to the features of excellent CMS at home and abroad. SQL injection vulnerability exists in Taote AspCMS v6.5, which can be exploited by attackers to obtain...

Arbitrary File Editing Vulnerability in KingCMS v6.1.1641_Sp2

KingCMS is a content management system based on WEB technology. KingCMS v6.1.1641Sp2 has an arbitrary file editing vulnerability. The vulnerability stems from not filtering the path of the file to be modified and the content of the file to be written, which can be exploited by an attacker to edit...

EMC RSA Archer GRC Platform URL Redirection Vulnerability

EMC RSA Archer GRC Platform is an enterprise IT governance and compliance governance product from EMC Corporation USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. A URL redirection vulnerability exists in the QuickLin...

XSS vulnerability in metinfo version 6.0.0

MetInfo is a Content Management System CMS developed using PHP and Mysql. A cross-site scripting vulnerability exists in MetInfo version 6.0.0. The vulnerability occurs because app/system/feedback/web/feedback.class.php fails to properly handle input data. An attacker can exploit this vulnerabili...

Amazon Music Player Remote Code Execution Vulnerability

Amazon Music Player is a music player from Amazon USA. A security vulnerability exists in the handling of URI handlers in Amazon Music Player version 6.1.5.1213, which stems from the program not validating user-submitted strings. The vulnerability can be exploited to execute code by tricking a us...

CactusVPN root elevation of privilege vulnerability

CactusVPN for macOS is a macOS-based VPN software from CactusVPN Moldova for anonymous access to the Internet. privileged helper tool is one of the helper tools. A privileged helper tool vulnerability exists in CactusVPN 6.0 and earlier versions for macOS-based platforms. An attacker can exploit...

QNAP Qfinder Pro Information Disclosure Vulnerability

QNAP Qfinder Pro is a suite of software from China Weilian QNAP Systems for quickly searching for QNAP NAS devices on your LAN. A security vulnerability exists in QNAP Qfinder Pro 6.1.0.0317 and earlier versions. An attacker could exploit the vulnerability to obtain sensitive information on a NAS...

CVE-2018-6641

An Arbitrary Free Remote Code Execution issue was discovered in Design Science MathType 6.9c. Crafted input can overwrite a structure, leading to a function call with an invalid parameter, and a subsequent free of important data such as a function pointer or list pointer. This is fixed in 6.9d...