Zivif PR115-204-P-RS Remote Command Injection Vulnerability

The Zivif PR115-204-P-RS is a webcam device. A remote command injection vulnerability exists in Zivif PR115-204-P-RS version 2.3.4.2103. A remote attacker can exploit this vulnerability to inject arbitrary commands...

Stored Cross-Site Scripting Vulnerability in HYBBS v2.0

HYBBS is a MVC-structured program based on HYPHP framework. A stored cross-site scripting vulnerability exists in HYBBS v2.0. An attacker can insert malicious js code into the page to obtain user cookies and other information, resulting in user hijacking...

CVE-2017-15892

Multiple cross-site scripting XSS vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via 1 COMMAND, 2 COMMANDS INSTRUCTION, or 3 DESCRIPTION parameter...

DEBIAN-CVE-2017-10868

H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header...

IKARUS anti.virus ntguard.sys driver arbitrary write vulnerability (CNVD-2017-37947)

IKARUS anti.virus is the Austrian IKARUS Security Software company a set of antivirus software products. ntguard.sys driver is one of the self-protection system driver . IKARUS anti.virus 2.16.18 before the version of the ntguard.sys driver there is an arbitrary write vulnerability, the...

Denial of Service Vulnerability in Multiple F5 Products (CNVD-2018-01140)

F5 BIG-IP LTM, etc. are products of F5 Corporation, U.S.A. F5 BIG-IP LTM is a local traffic manager; BIG-IP AAM is an application acceleration manager. A denial-of-service vulnerability exists in multiple F5 products that stems from the Traffic Management Microkernel TMM failing to properly handl...

Piwigo Batch Manager Component SQL Injection Vulnerability

Piwigo is a web-based photo album software from Piwigo team. The software supports photo publishing, management, multiple browsing category, tag, time, etc. Batch Manager component is one of the manager components. A SQL injection vulnerability exists in the Batch Manager component in Piwigo...

Piwigo Configuration Component SQL Injection Vulnerability

Piwigo is a set of web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing categories, tags, time, etc. Configuration component is a component for configuration. A SQL injection vulnerability exists in the Configuration component ...

CVE-2017-17814

In Netwide Assembler NASM 2.14rc0, there is a use-after-free in dodirective in asm/preproc.c that will cause a remote denial of service attack...

Netwide Assembler 'pp_getline' Function Memory Misreference Vulnerability

Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A memory misreference vulnerability exists in the 'ppgetline' function in the asm/preproc.c file in NASM version 2.14rc0. A remote attacker could exploit this vulnerability to cause a denial of service...

CVE-2017-17774

admin/configuration.php in Piwigo 2.9.2 has CSRF...

PHP Scripts Mall Secure E-commerce Script SQL Injection Vulnerability

PHP Scripts Mall Secure E-commerce Script is a set of PHP based e-commerce website scripts from PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Secure E-commerce Script version 2.0.1. A remote attacker can inject SQL into the category.php file by sending the...

PHP Scripts Mall Car Rental Script SQL Injection Vulnerability

PHP Scripts Mall Car Rental Script is a PHP based car rental website script by PHP Scripts Mall India. The script supports car rental reservation, vehicle type selection and user registration. A SQL injection vulnerability exists in PHP Scripts Mall Car Rental Script version 2.0.4. A remote...

PT-2017-4207

Name of the Vulnerable Software and Affected Versions glibc version 2.5 Description The issue is related to a buffer overflow that can be triggered through the LD LIBRARY PATH environment variable. This allows an attacker to access confidential data, compromise its integrity, and cause a denial o...

CVE-2017-1487

IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...

IKEv2 Protocol Denial of Service Vulnerability in Multiple Huawei Products

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A denial-of-service vulnerability exists in the IKE...

IKARUS anti.virus pool corruption vulnerability

IKARUS anti.virus is a set of antivirus products from IKARUS Security Software Austria. ntguardx64.sys is one of the self-protection system. A security vulnerability exists in IKARUS anti.virus version 2.16.15 in version 0.18780.0.0 of ntguardx64.sys. No details of the vulnerability are provided ...

DEBIAN-CVE-2017-17085

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length...

Princeton PTW-WMS1 Buffer Overflow Vulnerability

The Princeton PTW-WMS1 is a wireless storage device from Princeton Japan. A buffer overflow vulnerability exists in the Princeton PTW-WMS1 using firmware version 2.000.012. A remote attacker can exploit this vulnerability to cause a denial of service with the help of specially crafted packets...

EMC ScaleIO MDM, SDS and LIA Denial of Service Vulnerabilities

EMC ScaleIO is a software-defined solution for converting DAS storage to shared data block storage from EMC Corporation, U.S.A. MDM, SDS, and LIA are among the message resolvers. A denial of service vulnerability exists in MDM, SDS, and LIA in EMC ScaleIO version 2.0.1.x. The vulnerability can be...