Memcached 'item_free()' function integer overflow vulnerability

Memcached is the American software developer Brad Fitzpatrick Brad Fitzpatrick developed a set of high-performance distributed memory object caching system. The system by caching data and objects in memory to reduce the number of times to read the database , thus improving the speed of access to...

NetIQ iManager Authentication Vulnerability

NetIQ iManager is a WEB-based application from American NetIQ. You can use wireless devices to manage and configure eDirectory objects. A security vulnerability exists in NetIQ iManager versions prior to 3.0.3 that originates when the program sends an SSL private key from a Java application to...

PYSEC-2018-6

An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19. If django.utils.text.Truncator's chars and words methods were passed the html=True argument, they were extremely slow to evaluate certain inputs due to a catastrophic backtracking vulnerability in a...

Adobe Shockwave Player Remote Memory Corruption Vulnerability (CNVD-2018-05011)

Adobe Shockwave Player is software that plays web content created using Macromedia and Adobe Director. A memory corruption vulnerability exists in versions prior to Adobe Shockwave Player 11.6.4.634, which could allow a remote attacker to execute arbitrary code or cause a denial of service...

Exim < 4.90.1 RCE Vulnerability - Version Check

Exim is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:exim:exim";...

Linux kernel denial of service vulnerability (CNVD-2018-04867)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the drivers/net/ethernet/hisilicon/hns/hnsenet.c file in Linux kernel versions prior to 4.13. A local attacker could exploit this...

WonderCMS Arbitrary File Deletion Vulnerability

WonderCMS is an open source, fast, small and simple flat file cms. An arbitrary file deletion vulnerability exists in index.php in WonderCMS versions prior to 2.4.1. A remote attacker can exploit this vulnerability to delete arbitrary files via directory traversal...

PHP has an unspecified vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

Squid Software Foundation Squid HTTP Caching Proxy Denial of Service Vulnerability (CNVD-2018-05766 )

Squid Software Foundation Squid HTTP Caching Proxy is an open source HTTP caching proxy software . A security vulnerability exists in the handling of HTTP Response X-Forwarded-For packet headers in versions of Squid Software Foundation Squid HTTP Caching Proxy prior to 4.0.23. An attacker could...

Linux kernel double release vulnerability (CNVD-2018-03942)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A double release vulnerability exists in versions of Linux kernel prior to 4.7. No details of the vulnerability are provided at this time...

NetApp AltaVault OST Plugin Information Disclosure Vulnerability

NetApp AltaVault is a cloud storage solution from NetApp, Inc. that features scalability, data encryption, and support for data backup and recovery. The solution features scalability, data encryption, and support for data backup and recovery.OST Plug-in is one of the APIs used to provide backup a...

UBUNTU-CVE-2017-15914

Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3...

Atlassian Confluence Server Cross-Site Scripting Vulnerability (CNVD-2018-03442)

Atlassian Confluence Server is a suite of professional enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build an enterprise WiKi. the software enables collaboration and knowledge sharing amongst team members. A cross-site scripting...

Anymail Timing Attack Vulnerability

Anymail aka django-anymail is an open source e-mail sending and receiving system . A security vulnerability exists in the webhooks/base.py file in versions of Anymail prior to 1.2.1. No details of the vulnerability are provided at this time...

CVE-2016-0329

Open redirect vulnerability in IBM Emptoris Sourcing 10.0.0.x before 10.0.0.1iFix3, 10.0.1.x before 10.0.1.3iFix3, 10.0.2.x before 10.0.2.8iFix1, 10.0.4.0 before 10.0.4.0iFix8, and 10.1.0.0 before 10.1.0.0iFix3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing...

UBUNTU-CVE-2018-6560

In dbus-proxy/flatpak-proxy.c in Flatpak before 0.8.9, and 0.9.x and 0.10.x before 0.10.3, crafted D-Bus messages to the host can be used to break out of the sandbox, because whitespace handling in the proxy is not identical to whitespace handling in the daemon...

NSClient++ Local Elevation of Privilege Vulnerability

NSClient++ is an open source host monitoring agent software. A security vulnerability exists in versions of NSClient++ prior to 0.4.1.73. The vulnerability can be exploited to execute arbitrary code with elevated privileges via a malicious program.exe executable file in the %SYSTEMDRIVE% folder...

Mozilla Firefox Arbitrary Code Execution Vulnerability (CNVD-2018-03615)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 58.0.1. The vulnerability can be exploited by remote attackers to execute arbitrary code via unfiltered output in the...

Siemens TeleControl Server Basic Authentication Bypass Vulnerability

Siemens TeleControl Server Basic is a remote control system for Siemens equipment from Siemens, Germany. A security vulnerability exists in Siemens TeleControl Server Basic versions prior to 3.1. An attacker could use this vulnerability to bypass the identity access mechanism and read restricted...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2018-02234)

Mozilla Firefox is an open source web browser developed by the Mozilla Foundation in the United States. A security vulnerability exists in versions of Mozilla Firefox prior to 58. A remote attacker could exploit the vulnerability to access frames across sources...