CVE-2017-10862

jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token...

Code injection

jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token...

Google Android Broadcom Component Elevation of Privilege Vulnerability (CNVD-2017-31740)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and Broadcom Wi-Fi driver is a Broadcom-developed Wi-Fi driver module used in it. An elevation of privilege vulnerability exists in the Broadcom Wi-Fi driver in Android. An attack...

Google Android Qualcomm Memory Subsystem Memory Corruption Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Memory subsystem is a Qualcomm memory subsystem. A security vulnerability exists in the Qualcomm Memory subsystem in Android. An attacker could exploit this vulnerability...

Vanilla: Overwrite Drafts of Everyone

Description: ----------- Users have option to save drafts before doing comment on posts or discussions, where DraftID parameter is get passed to keep the draft record and if attacker replace this id with any existing id it will simple overwrite that record without checking the permission he that...

Joomla! cross-site scripting vulnerability (CNVD-2017-26330)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A cross-site scripting vulnerability exists in versions of Joomla! prior to 3.7.4. The vulnerability stems from the program's failure to adequately...

iSmartAlarm cube device input validation vulnerability

The iSmartAlarm cube devices are a smart home device from iSmartAlarm USA. A denial of service vulnerability exists in iSmartAlarm cube devices. An attacker can exploit this vulnerability to cause a denial of service device stops responding...

IBM Jazz Reporting Service Information Disclosure Vulnerability (CNVD-2017-15929)

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2017-12562)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information...

Microsoft Windows Local Security Bypass Vulnerability (CNVD-2017-12994)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local security bypass vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2017-12054)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to obtain sensitive information...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-12104)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security bypass vulnerability exists in Microsoft Edge. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized...

Phoenix Contact mGuard Denial of Service Vulnerability

Phoenix Contact mGuard is a security device from Phoenix Contact that protects systems from unauthorized access and installation. Phoenix Contact mGuard denial of service vulnerability. An attacker can exploit this vulnerability to cause a denial of service...

QEMU Denial of Service Vulnerability (CNVD-2017-08695)

QEMU aka Quick Emulator is a set of simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. A denial of service vulnerability exists in QEMU. An attacker could exploit this vulnerability to cause a denial of service...

Adobe Flash Player Memory Corruption (APSB17-10: CVE-2017-3064)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

FFmpeg Heap Buffer Overflow Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. FFmpeg suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code in the context of an affected application...

LastPass for Firefox Security Bypass Vulnerability

LastPass LastPass Password Manager is a free cross-platform online password management tool developed by LastPass Inc. in the United States. The tool can be integrated with the browser and provides it with password management, autofill forms and other features, support for random password...

keycloak denial of service vulnerability

keycloak is the United States Red Hat Red Hat company's set of open source for modern applications and services for identity and access management software . A denial of service vulnerability exists in keycloak. An attacker could exploit this vulnerability to cause a denial of service...

Evostream Media Server Denial of Service Vulnerability

Evostream Media Server is a software that supports efficient multi-platform media streaming delivery. A denial of service vulnerability exists in Evostream Media Server. An attacker could exploit this vulnerability to corrupt the application and cause a denial of service...

Linux kernel denial of service vulnerability (CNVD-2017-02389)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the Linux kernel. An attacker could exploit this vulnerability to cause a denial of service...