480 matches found
Oracle MySQL Server Denial of Service Vulnerability (CNVD-2018-21803)
Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Parser subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.12 and earlier. An...
Microsoft PowerPoint Remote Code Execution Vulnerability (CNVD-2018-17618)
Microsoft Office PowerPoint is Microsoft's presentation software. A remote code execution vulnerability exists in Microsoft PowerPoint. The vulnerability stems from the software failing to properly handle objects in memory. An attacker can exploit the vulnerability to run arbitrary code in the...
PT-2018-3597 · Mysql Server +8 · Mysql Client +8
Name of the Vulnerable Software and Affected Versions: MySQL Client versions 5.7.32 and prior MySQL Client versions 8.0.22 and prior Description: The issue is related to the C API component of the MySQL Client product, which allows an unauthenticated attacker with network access via multiple...
Android Security Bulletin—June 2018Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2018-06-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
Google Android Framework elevation of privilege vulnerability (CNVD-2018-10696)
Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, which can be exploited by an attacker to elevate privileges...
Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2018-08444)
Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. An unspecified vulnerability exists in the Core component of Oracle VM VirtualBox. An attacker could explo...
Zonemaster Web GUI Cross-Site Scripting Vulnerability
Zonemaster Web GUI is an open source Web graphical user interface in the Zonemaster project . A cross-site scripting vulnerability exists in the lib/Zonemaster/GUI/Dancer/Export.pm file in Zonemaster Web GUI. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...
Unspecified Vulnerability in Papenmeier WiFi Baby Monitor Free&Lite
Papenmeier WiFi Baby Monitor Free&Lite is a mobile application for wireless baby monitor from Papenmeier, Germany. A security vulnerability exists in Papenmeier WiFi Baby Monitor Free&Lite. A remote attacker can exploit the vulnerability by sending requests to TCP ports 8258 and 8257 to obtain...
Node.js third-party modules: `macaddress` concatenates unsanitized input into exec() command
NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to triage and respond quickly, so be sure to take your time filling out the report! I would like to report code injection i...
Asus_GlobalWirteOverflow
Vulnerability: Global buffer overflow in networkmap ------------------------------------------ Exploitation: Can write data at any address in heap ------------------------------------------ Vendor of Product: Asus wireless router ------------------------------------------ Affected Products and...
Perspective ICM Investigation & Case 5.1.1.16 - Privilege Escalation Vulnerability
Exploit for windows platform in category web applications Exploit Title: Privilege Escalation - Perspective ICM Investigation & Case - 5.1.1.16 Date Reported to vendor: Jun 28, 2017 Date Accepted by vendor: Jun 11, 2017 Exploit Author: email protected Vendor Homepage: www.resolver.com Version:...
Tuleap 9.6 Second-Order PHP Object Injection Vulnerability
Exploit for php platform in category web applications ------------------------------------------------------------- Tuleap getPreferenceself::PREFERENCERECENTELEMENTS 1427. if $recentelements = unserialize$recentelements 1428. if isarray$recentelements 1429. return $recentelements; 1430. 1431...
Escort Marketplace 1.0 - SQL Injection
Exploit Title: Escort Website Script 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/escort-website Demo: http://escortwebsite.scriptzee.com/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: N/A Exploit...
