CVE-2017-17308

SCCPX module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has an invalid memory access vulnerability. An unauthenticated, remote...

NVIDIA GPU Display Driver Out-of-Bounds Memory Access Vulnerability

NVIDIA GPU Display Driver is the GPU Graphics Processing Unit display driver. An out-of-bounds memory access vulnerability exists in the kernel mode layer handler for DxgkDdiEscape in the NVIDIA GPU Display Driver. The vulnerability arises when the software reads or writes a buffer using a...

Advanced SystemCare Ultimate Denial of Service Vulnerability

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A security vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate version 11.0.1.58, which originates...

Directory Traversal

micra is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of ../ sanitization on the user input, allowing attackers to access files outside of the server's scope...

Override access vulnerability in Spike's web version

Nail is a free multi-end platform for communication and collaboration created by Alibaba Group specifically for Chinese enterprises. Nail web version of the existence of bulk user override access vulnerability, an attacker can exploit the vulnerability bulk traversal of hundreds of millions of ui...

CVE-2018-1000099

Teluu PJSIP version 2.7.1 and earlier contains a Access of Null/Uninitialized Pointer vulnerability in pjmedia SDP parsing that can result in Crash. This attack appear to be exploitable via Sending a specially crafted message. This vulnerability appears to have been fixed in 2.7.2...

Illegal Memory Access Vulnerability in Lovecraft Universal Player

Lovecraft Universal Player is a universal video and audio player from Lovecraft. A QiYi Universal Player suffers from an illegal memory access vulnerability when handling special avi files, which can be exploited by an attacker to cause a denial of service attack...

Philips Intellispace Portal Unauthorized Access Vulnerability (CNVD-2018-03808)

The Philips Intellispace Portal handles clinical images from different modalities and enables advanced visualization of images. ISP systems are deployed in the healthcare and public health sectors. An unauthorized access vulnerability exists in Philips Intellispace Portal, which could be exploite...

Drupal Patches Critical Bug That Leaves Platform Open to XSS Attack

Drupal developers patched two critical vulnerabilities this week in versions 7 and 8 of its content management system platform. Overall, Drupal patched seven vulnerabilities including four rated moderately critical and two flaws rated less critical. The first of the critical flaws is a comment...

CVE-2017-18192

CVE-2017-18192 describes a vulnerability in the Android version of the app named “Photo,Video Locker-Calculator.” The issue, located in CalculatorActivity.java, allows an attacker to access files via a backdoor PIN (17621762). According to the connected documents, this affects the app through ver...

CVE-2017-17163

Huawei Secospace USG6600 V500R001C30SPC100 has an Out-of-Bounds memory access vulnerability due to insufficient verification. An authenticated local attacker can make processing crash by executing some commands. The attacker can exploit this vulnerability to cause a denial of service...

Drupal Open Atrium Module OG Subgroups Module Access Bypass Vulnerability

Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.Open Atrium module is a teamwork development module based on the Drupal platform.OG Subgroups module is one of the OG subgroups module. A security vulnerability exists in the OG...

CVE-2018-2629

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JGSS. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker...

Design/Logic Flaw

BA SYSTEMS BAS Web on BAS920 devices with Firmware 01.01.00, HTTPserv 00002, and Script 02. and ISC2000 devices allows remote attackers to obtain sensitive information via a request for isc/getsidjs.aspx or isc/getsid.aspx, as demonstrated by obtaining administrative access by subsequently using...

CVE-2017-17803

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x82736068, a different vulnerability than CVE-2017-17475...

Multiple Cisco Products Cisco NX-OS System Software Unauthorized Access Vulnerability

Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches are all Cisco switches.NX-OS System The NX-OS System Software is the operating system used in these switches. An unauthorized access vulnerability exists in Cisco NX-OS System Software...

Moderate: Red Hat Security Advisory: qemu-kvm security update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

phpaaCMS suffers from an override access vulnerability

phpaaCMS is a simple article management system. An override access vulnerability exists in the /admin/global.php file in phpaaCMS, which can be exploited by an attacker to override backend operations...

CVE-2017-8183

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any...

Cisco Unity Presence Voice Operating System-Based Products Unauthorized Access Vulnerability

According to its self-reported version, the Cisco Unity Presence is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...