iPOS - לאומי קארד - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application iPOS - לאומי קארד published at the 'play' market has multiple vulnerabilities...

Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: July 11, 2017

Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: July 11, 2017 Summary An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory.To learn more about the vulnerability, se...

Windows System Information Console Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Microsoft Common Console Document .msc when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity XXE...

Description of the security update for Excel Services on SharePoint Server 2010: July 11, 2017

Description of the security update for Excel Services on SharePoint Server 2010: July 11, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilitie...

.NET Denial of Service Vulnerability

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...

(Pwn2Own) Microsoft Windows CLFS Driver Uninitialized Memory Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Common Log...

Privat24 - Customized SSL, Hardcoded secrets, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Privat24 published at the 'play' market has multiple vulnerabilities...

Denial Of Service (DoS) Through Buffer Overflow

icu4c is vulnerable to denial of service DoS through buffer overflows.The common/utext.cpp file has a flaw that allows a malicious user to cause a out-of-bounds write by passing a string to the application. This can lead to a heap-based buffer overflow that can crash the application...

CentOS 7 : bind (CESA-2017:1680)

"An update for bind is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit

The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the decodeframecommon function in libavcodec/pngdec.c...

Xen 'shadow/common.c' elevation of privilege vulnerability

Xen is an open source virtual machine monitor. An elevation of privilege vulnerability exists in Xen 'shadow/common.c'. An attacker could exploit the vulnerability to gain elevated privileges...

Jabong - ONLINE FASHION STORE - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Jabong - ONLINE FASHION STORE published at the 'play' market has multiple vulnerabilities...

CVE-2017-9218

CVE-2017-9218 affects Freeware Advanced Audio Decoder 2 (FAAD2) 2.7. The vulnerable component is mp4ff_read_stsd in common/mp4ff/mp4atom.c, where crafted MP4 files can trigger an invalid memory read leading to an application crash (denial of service). Connected sources corroborate the same descri...

Debian DSA-3897-1 : drupal7 - security update

Two vulnerabilities were discovered in Drupal, a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2015-7943 Samuel Mortenson and Pere Orga discovered that the overlay module does not sufficiently validate URLs...

The vulnerability of the Qualcomm GPU operating system for Linux, allowing a hacker to execute arbitrary code

The vulnerability of the Common Internet Filesystem microprogramming system in Cisco Adaptive Security Appliances arises from insufficient validation of input data and the execution of operations outside the buffer in dynamic memory. Exploiting this vulnerability allows a malicious actor to perfo...

CVE-2017-9622

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data...

JIBIT - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application JIBIT published at the 'play' market has multiple vulnerabilities...

AEK, EUSKARA PRAKTIKOA - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application AEK, EUSKARA PRAKTIKOA published at the 'play' market has multiple vulnerabilities...

Lightning Web Browser - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Lightning Web Browser published at the 'play' market has multiple vulnerabilities...