Drupal Core Remote Code Execution Vulnerability

Drupal is a free and open source content management system created by Dries Buytaert and written in PHP. In the industry Drupal is often regarded as a content management framework, rather than a content management system in the general sense. A remote code execution vulnerability exists in severa...

Huawei P9 Lite Inputhub Driver Buffer Overflow Vulnerability

Huawei P9 Lite is a smartphone product from Chinese company Huawei Huawei. The Huawei P9 Lite Inputhub driver suffers from a buffer overflow vulnerability that can cause the phone to reboot by an attacker by tricking the user into installing a malicious application, which sends specific parameter...

Ubuntu 14.04 LTS / 16.04 LTS : ICU vulnerability (USN-3610-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3610-1 advisory. It was discovered that ICU incorrectly handled certain calendars. If an application using ICU processed crafted data, a remote attacker could possibly...

USN-3610-1 icu vulnerability

It was discovered that ICU incorrectly handled certain calendars. If an application using ICU processed crafted data, a remote attacker could possibly cause it to crash, leading to a denial of service...

IBM ConnectionsXML External Entity Injection Vulnerability

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. An XML external entity...

QOS.CH SLF4J slf4j-ext Module Access Restriction Bypass Vulnerability

QOS.CH SLF4J is a framework for accessing logging systems and viewing log files from the Swiss company QQS.CH. slf4j-ext module is one of the extension modules. A security vulnerability exists in org.slf4j.ext.EventData in the slf4j-ext module of QOS.CH SLF4J. A remote attacker could exploit this...

Apache Commons-Email Information Disclosure Vulnerability

Apache Commons-Email is the United States Apache Apache Software Foundation, an application programming interface that provides e-mail sending capabilities. An information disclosure vulnerability exists in Apache Commons-Email that originates from the program failing to properly validate input. ...

CVE-2018-8088

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series...

DEBIAN-CVE-2018-8088

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series...

Exempi Denial of Service Vulnerability (CNVD-2018-06684)

Exempi is an open source implementation of XMP based on the Adobe XMP SDK. A security vulnerability exists in the Chunk class of the XMPFiles/source/FormatSupport/RIFF.cpp file in versions of Exempi prior to 2.4.4. A remote attacker can exploit this vulnerability to cause a denial of service...

Joyent Node.js moment module denial of service vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform . moment is one of the JavaScript date processing library . A security vulnerability exists in the Joyent Node.js moment module. The vulnerability can be...

UBUNTU-CVE-2018-0489

Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this...

Design/Logic Flaw

A remote, unauthenticated attacker may be able to execute code by exploiting a use-after-free defect found in older versions of PHP through injection of crafted data via specific PHP URLs within the context of the J-Web process. Affected releases are Juniper Networks Junos OS: 12.1X46 versions...

CVE-2014-7221

TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service buffer overflow and application crash by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab containing img//http:// substrings...

CVE-2014-7222

Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service application crash by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab with two \ backslash characters, a digit, a ...

Buffer overflow

Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service application crash by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab with two \ backslash characters, a digit, a ...

Buffer overflow

TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service buffer overflow and application crash by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab containing img//http:// substrings...

CVE-2014-7222

Buffer overflow in TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service application crash by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab with two \ backslash characters, a digit, a ...

CVE-2014-7221

TeamSpeak Client 3.0.14 and earlier allows remote authenticated users to cause a denial of service buffer overflow and application crash by connecting to a channel with a different client instance, and placing crafted data in the Chat/Server tab containing img//http:// substrings...

Cisco WebEx ARF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cisco WebEx Network Recording Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...