CVE-2017-10392

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-10014

Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications subcomponent: Suite8/RESTAPI. The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Oracle MySQL Client programs Subcomponent Unauthorized Access Vulnerability

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. A security vulnerability exists in the Client programs subcomponent of the MyS...

Issuetracker phpBugTracker SQL Injection Vulnerability

Issuetracker phpBugTracker is a web-based defect tracking system. The system provides features such as project management and defect tracking services. A SQL injection vulnerability exists in Issuetracker phpBugTracker before 1.7.0. The vulnerability can be exploited by remote attackers to execut...

Adobe Flash Player Security Update (APSB17-32) - Mac OS X

Adobe Flash Player is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Red Hat OpenShift Information Disclosure Vulnerability (CNVD-2017-32135)

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that builds, tests, deploys and runs applications. An information disclosure vulnerability exists in selinux-policy in Red Hat OpenShift version 2. An attacker could exploit the vulnerability to obtain...

DiskBoss Enterprise Server 8.x <= 8.3.12 Buffer Overflow Vulnerability - Windows

DiskBoss Enterprise is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fedora Update for wordpress FEDORA-2017-3bf0bd9c0c

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for poppler FEDORA-2017-b29d431ac7

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Regular Expression Denial of Service

Overview Affected versions of method-override are vulnerable to a regular expression denial of service vulnerability when untrusted user input is passed into the X-HTTP-Method-Override header. Recommendation Update to version 2.3.10 or later References GitHub Advisory...

WSO2 API Manager XSS Vulnerability

WSO2 API Manager is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Samba Server 'SMB3' MitM Vulnerability (CVE-2017-12151)

Samba is prone to a MitM vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba"; ifdescription...

Fedora Update for drawtiming FEDORA-2017-3a568adb31

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for perl-Image-SubImageFind FEDORA-2017-3a568adb31

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nagios Privilege Escalation Vulnerability

Nagios is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagios";...

WordPress Event Expresso Free SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Event Expresso Free is one of the event management plugin. A SQL injection vulnerability exists in WordPress Event...

VLC Media Player iOS App 2.7.8 File Disclosure Vulnerability

VLC Media Player iOS application version 2.7.8 suffers from a file disclosure vulnerability. title: Local File Disclosure product: VLC media player iOS app vulnerable version: 2.7.8 fixed version: 2.8.1 CVE number: - impact: Medium homepage:...

Tcpdump IEEE 802.15.4 Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. This tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.IEEE 802.15.4 parser is one of the IEEE 802.15.4 standard parsers....

Tcpdump PGM parser buffer overflow vulnerability (CNVD-2017-28275)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tool allows users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.PGM parser is one of the transport layer multicast protocol parsers. A...

Fedora Update for emacs FEDORA-2017-a1dc0ef38c

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...