CVE-2017-8037: Incomplete fix for Cloud Controller API access to CC VM Contents | Cloud Foundry

Severity Critical Vendor Cloud Foundry Foundation Versions Affected CAPI-release versions after v1.6.0 and prior to v1.38.0 cf-release versions after v244 and prior to v270 Description This CVE is for an incomplete fix for CVE-2017-8035. If you took steps to remediate CVE-2017-8035 you should als...

Ledger Denial of Service Vulnerability

Ledger is a powerful double-entry bookkeeping system accessible from the UNIX command line. A denial of service vulnerability exists in the findoption function in option.cc in Ledger, which can be exploited by a remote attacker to cause a denial of service stack buffer overflow and application...

cc-community.net Open Redirect vulnerability

Vulnerable URL: https://www.cc-community.net/redirect/?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.10.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 140077 VIP website status:| No...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDF::resolveObjectsInStream function in QPDF.cc, aka an "infini...

Adobe is Finally Killing FLASH — At the End of 2020!

Finally, Adobe is Killing FLASH — the software that helped make the Internet a better place with slick graphics, animation, games and applications and bring online video to the masses, but it has been hated for years by people and developers over its buggy nature. But the end of an era for Adobe...

PEGA Platform <= 7.2 ML0 - Missing Access Control / Cross-Site Scripting

Summary ======= 1. Missing access control CVE-2017-11356 2. Multiple cross-site scripting CVE-2017-11355 Vendor ====== "Pegasystems Inc. is the leader in software for customer engagement and operational excellence. Pega’s adaptive, cloud-architected software – built on its unified Pega® Platform ...

sell.d17.cc XSS vulnerability

Vulnerable URL: http://sell.d17.cc/search?hidden=1=aaaaa%27%22+onmouseover%3Dprompt%2FOPENBUGBOUNTY%2F+autofocus%3Dx+bad%3D%22%3Ede%27m%22%3E%3C%2Ftitle%3E%3C%2Fscript%3E%3Cmarquee+onstart%3Dprompt%2FOPENBUGBOUNTY%2F%3Edem%3C%2Ftag%3E=%E6%90%9C%E7%B4%A2 Details: Description| Value ---|--- Patched...

Samsung Magician fails to update itself securely

Overview Samsung Magician fails to securely check for and retrieve updates, which an allow an authenticated attacker to execute arbitrary code with administrator privileges. Description Samsung Magician is a management utility for Samsung SSDs. Prior to version 5.0, Samsung Magician checks for an...

WiMAX CPE Authentication Bypass Vulnerability

Various WiMAX CPEs are vulnerable to an authentication bypass. An attacker can set arbitrary configuration values without prior authentication. The vulnerability is located in commit2.cgi implemented in libmtkhttpdplugin.so. title: Various WiMAX CPEs Authentication Bypass product: see "Vulnerable...

XSS in search dialogue - ownCloud

Inadequate escaping lead to XSS vulnerability in the search module. To be exploitable an user has to write or paste malicious content into the search dialogue. Affected Software ownCloud Server 10.0.2 CVE-2017-9338 ownCloud Server 9.1.6 CVE-2017-9338 ownCloud Server 9.0.10 CVE-2017-9338 ownCloud...

Qualys Cloud Suite 8.10 New Features

This new release of the Qualys Cloud Suite, version 8.10, includes new capabilities and improvements to for VM, PC and shared platform improvements: Authentication Vault integration with BeyondTrust Mandate-Based reporting for Policy Compliance to simplify reporting against multiple mandates and...

CVE-2017-8825

A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. A crash can occur in low-level/imf/mailimf.c during a failed parse of a Cc header containing multiple e-mail addresses...

UBUNTU-CVE-2017-8825

A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. A crash can occur in low-level/imf/mailimf.c during a failed parse of a Cc header containing multiple e-mail addresses...

CVE-2017-8825

A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. A crash can occur in low-level/imf/mailimf.c during a failed parse of a Cc header containing multiple e-mail addresses...

CVE-2017-8825

A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2. A crash can occur in low-level/imf/mailimf.c during a failed parse of a Cc header containing multiple e-mail addresses...

IBM Releases Security Update

IBM has released a security update to address a vulnerability in IBM Domino server IMAP EXAMINE. An attacker could exploit this vulnerability to take control of an affected system. Available updates include: Domino 9.0.1 Feature Pack 8 Interim Fix 2 Domino 8.5.3 Fix Pack 6 Interim Fix 17 Users an...

Exploit for CVE-2017-0199

Exploit toolkit CVE-2017-0199 - v4.0 Exploit toolkit CVE-201...

Design/Logic Flaw

Adobe Photoshop versions CC 2017 18.0.1 and earlier, CC 2015.5.1 17.0.1 and earlier have an unquoted search path vulnerability...

CVE-2017-3004

CVE-2017-3004 affects Adobe Photoshop CC 17.x (and 18.x) prior to the patched versions, with a memory corruption vulnerability when parsing malicious PCX files that could lead to arbitrary code execution. Connected sources (APSB17-12, NVD entry) confirm the vulnerability stems from PCX handling a...

CVE-2017-3005

Adobe Photoshop CC (Windows) is affected by CVE-2017-3005 (unquoted search path vulnerability) in versions CC 2017 (18.0.1) and earlier and CC 2015.5.1 (17.0.1) and earlier; APSB17-12 notes remediation by updating to fixed builds (e.g., 17.x/18.x beyond 18.1). A related issue, CVE-2017-3004, is a...