CVE-2017-13993

An Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes Management Software, Version 2.4.0 and prior versions. An uncontrolled search path element vulnerability has been identified which could be exploited by placing a specially crafted DLL file in the search path...

Cisco IOS and IOS XE Software Denial of Service Vulnerability (CNVD-2017-34218)

Cisco IOS and IOS XE are both operating systems developed by Cisco for its network devices. Cisco IOS Software/Cisco IOS XE Software has a security vulnerability in the IKEv2 module, where an unauthenticated, remote attacker causes CPU exhaustion, traceroute messages, and reloading of affected...

PT-2017-2988 · Cisco · Cisco Ios +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 15.0 through 15.6 Cisco IOS XE versions 3.5 through 16.5 Description: A vulnerability in the Internet Key Exchange Version 2 IKEv2 module could allow an unauthenticated, remote attacker to cause high CPU utilization,...

GNU Binutils Denial of Service Vulnerability (CNVD-2017-33379)

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with object files in a variety of formats, with connectors, assemblers, and other tools for object files and archives.The Binary File Descriptor BFD library a.k.a...

Portus Cross-Site Scripting Vulnerability

Portus is the authorization interface for the next generation of Docker registries. A cross-site scripting vulnerability exists in Portus version 2.2.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'Team' field...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-34093)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...

httpd: ap_some_auth_required() does not properly indicate authenticated request in 2.4

It was discovered that in httpd 2.4, the internal API function apsomeauthrequired could incorrectly indicate that a request was authenticated even when no authentication was used. An httpd module using this API function could consequently allow access that should have been denied...

DEBIAN-CVE-2015-5168

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206...

SQL Injection Vulnerability in ShopsN v2.0 Frontend OrderController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end OrderController.class.php file SQL injection vulnerability . As the system fails to effectively filter the addrdel function. A remote attacker can exploit the vulnerability to obtain sensitive informatio...

The vulnerability of the OpenSUSE operating system, related to improper code generation management, allows attackers to inject arbitrary code.

The vulnerability of the OpenSUSE operating system is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to inject arbitrary code during the execution of certain services, using the built-in version 2.1 service...

XnView Classic for Windows Denial of Service Vulnerability (CNVD-2017-32604)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in version 2.40 of XnView Classic for Windows...

XnView Classic for Windows Denial of Service Vulnerability (CNVD-2017-32589)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in version 2.40 of XnView Classic for Windows...

XnView Classic for Windows Denial of Service Vulnerability (CNVD-2017-32603)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in version 2.40 of XnView Classic for Windows...

XnView Classic for Windows Arbitrary Code Execution Vulnerability (CNVD-2017-32592)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A security vulnerability exists in version 2.40 of XnView Classic for Windows...

SQL Injection Vulnerability in ShopsN v2.0 Frontend OrderController.class.php File

ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end OrderController.class.php file SQL injection vulnerability. The vulnerability is due to the system fails to effectively filter the data submitted by the user . An attacker can exploit this vulnerability ...

CVE-2017-14273

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlInterlockedPopEntrySList+0x00000000000003b0."...

CVE-2017-14271

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode Write AV starting at ntdll77400000!RtlImpersonateSelfEx+0x000000000000024e."...

D-Link DIR-850L REV.A and REV.B Denial of Service Vulnerabilities

The D-Link DIR-850L REV.A and REV.B are both wireless router products from AUO D-Link. The security vulnerability exists in D-Link DIR-850L REV.A and REV.B devices using firmware FW114WWb07h2abbeta1 and prior versions, and firmware FW208WWb02 and prior versions. A remote attacker could exploit th...

PT-2017-13302 · Intelbras · Intelbras Wireless N 150Mbps Router

Name of the Vulnerable Software and Affected Versions: Intelbras Wireless N 150Mbps router with firmware WRN 240 Description: The issue allows attackers to steal wireless credentials without being connected to the network. This is related to userRpm/popupSiteSurveyRpm.htm and...

FreeRDP Denial of Service Vulnerability (CNVD-2017-25708)

FreeRDP is a free, open source implementation of the Remote Desktop Protocol RDP developed by the FreeRDP team. A denial of service vulnerability exists in FreeRDP version 2.0.0-beta1+android11. A remote attacker can exploit this vulnerability to cause a denial of service...