ALPINE-CVE-2017-7548

PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers with no privileges on a large object to overwrite the entire contents of the object, resulting in a denial of service...

Kanboard Password Reset Vulnerability (CNVD-2017-28605)

Kanboard is a French software developer Frederic Guillot developed a set of open source visualization task board software. The software supports customization of the panel according to the business, task dragging and so on. A security vulnerability exists in Kanboard versions prior to 1.0.46. An...

Quali CloudShell Cross-Site Scripting Vulnerability

Quali CloudShell is a suite of cloud sandboxing software for delivering full-stack IT environments in hybrid clouds from Quali System, Israel. A cross-site scripting vulnerability exists in versions prior to Quali CloudShell 8. The vulnerability can be exploited by remote attackers to inject...

Synology Chat Server-Side Request Forgery Vulnerability

Synology Chat is a live chat tool from Synology. link preview is one of the link preview components. A server-side request forgery vulnerability exists in link preview in Synology Chat versions prior to 1.1.0-0806. A remote attacker can exploit this vulnerability to gain access to internal...

Unitrends Backup License Issue Vulnerability

Unitrends Backup UB is a set of data protection software from the American company Unitrends. The software provides data backup, data recovery and deduplication functions. A security vulnerability exists in the bpserverd proprietary protocol in versions of UB prior to 10.0.0. A remote attacker ca...

Unitrends Backup Authorization Issues Vulnerability (CNVD-2017-28329)

Unitrends Backup UB is a set of data protection software from the American company Unitrends. The software provides data backup, data recovery and deduplication functions. A security vulnerability exists in the api/storage web interface in versions of UB prior to 10.0.0, which stems from the...

UBUNTU-CVE-2017-7780

Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox 55...

t-coffee ~/.t_coffee out-of-bounds write vulnerability

t-coffee is a multiple alignment tool for calculating and evaluating the sequence and structure of DNA, RNA and proteins. A security vulnerability exists in versions prior to t-coffee 11.00.8cbe486-2. A local attacker could exploit the vulnerability to write to a file...

Joomla! CMS Installer Access Control Vulnerability

Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS. CMS installer is one of the Joomla! A security vulnerability exists in the CMS installer in versions of Joomla! prior to 3.7.4. A remote attacker can...

PT-2018-1896 · Openssh +5 · Openssh +5

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 7.4 Description: The issue is related to a denial of service caused by a NULL pointer dereference and daemon crash in OpenSSH. This can be triggered by remote attackers via an out-of-sequence NEWKEYS message, as...

UBUNTU-CVE-2017-11692

The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service assertion failure and application exit via a '!2' string...

DotNetNuke Remote Code Execution Vulnerability

DotNetNuke DNN is a set of U.S. DNN company supported by Microsoft , based on the ASP.NET platform for open source content management system CMS. The system is easy to install , scalable , feature-rich and so on. A security vulnerability exists in versions of DotNetNuke prior to 9.1.1. A remote...

GLPI '$crit' Variable SQL Injection Vulnerability

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A SQL injection vulnerability exists in the '$crit' variable in the...

flash-plugin: information disclosure issues fixed in APSB17-21

Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure...

Irssi Denial of Service Vulnerability (CNVD-2017-22565)

Irssi is a free, open source IRC client for use in Linux and Unix operating systems. A security vulnerability exists in versions of Irssi prior to 1.0.4. An attacker can exploit this vulnerability to cause a denial of service null pointer backreference...

Paessler PRTG Cross-Site Scripting Vulnerability

Paessler PRTG is a full-featured network monitoring and management software from Paessler AG, Germany. A cross-site scripting vulnerability exists in versions of Paessler PRTG prior to 16.2.24.4045. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via SNMP...

Trihedral VTScada Information Disclosure Vulnerability

Trihedral VTScada formerly known as VTS is a SCADA system from Trihedral Engineering, Canada, based on a Windows platform with a Web interface option. An information disclosure vulnerability exists in Trihedral VTScada versions prior to 11.2.26. An attacker could exploit this vulnerability to...

Lenovo XClarity Administrator Information Disclosure Vulnerability

Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The solution supports simplified infrastructure management, faster server response, and improved performance of Lenovo server systems. A security vulnerability exists in LXCA versions prior to...

PT-2017-3250 · Gnu +1 · Libffi +1

Name of the Vulnerable Software and Affected Versions: libffi versions prior to 3.1 Description: The issue is caused by libffi requesting an executable stack, allowing attackers to more easily trigger arbitrary code execution by overwriting the stack. This is due to a buffer overflow operation in...

Irssi Denial of Service Vulnerability (CNVD-2017-14156)

Irssi is a free, open source IRC client for use in Linux and Unix operating systems. A denial of service vulnerability exists in versions of Irssi prior to 1.0.3. A remote attacker could exploit this vulnerability to cause a crash...