D-Link DIR800 Series Router Remote Code Execution

A remote code execution vulnerability is exist in D-Link DIR800 series router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

D-Link 850L Router Remote Code Execution

A remote code execution vulnerability is exist in D-Link 850l router. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

OrientDB Server 2.2.x <= 2.2.22 RCE Vulnerability

OrientDB does not enforce privilege requirements during SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:orientdb:orientdb";...

CVE-2017-15236

Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to read settings via a crafted request to TCP port 3001, as demonstrated by config files and extendword.txt...

CVE-2017-15236

Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to read settings via a crafted request to TCP port 3001, as demonstrated by config files and extendword.txt...

Microsoft Windows Shell Memory Corruption Vulnerability

Microsoft Windows is a popular operating system. A memory corruption vulnerability exists in the Microsoft Windows Shell, which allows remote attackers to exploit the vulnerability by submitting a specific request that can be used in the context of an application to execute arbitrary code or cras...

IBM Security Identity Manager Virtual Appliance Arbitrary Command Execution Vulnerability (CNVD-2017-33517)

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

ZTE Microwave NR8000 Series Product Remote Code Execution Vulnerability

ZTE Microwave NR8120 and others are microwave transmission solutions from China's ZTE Corporation ZTE. A security vulnerability exists in the ZTE Microwave NR8000 series products. A remote attacker can exploit the vulnerability by sending a specially crafted RMI request to execute arbitrary code ...

Microsoft Windows SMB Out-Of-Bounds Read Denial of Service Vulnerability

This vulnerability allows remote attackers to create a denial-of-service on vulnerable installations of Microsoft Windows. Authentication is required to exploit this vulnerability, assuming the product is in its default configuration. The specific flaw exists within the srv driver. A crafted...

Trend Micro OfficeScan cgiShowClientAdm.exe Memory Corruption Code Execution Vulnerability

Trend Micro OfficeScan is a best-of-breed endpoint security solution for mid-sized and large organizations, with a future-proof, resilient architecture that allows you to customize your threat protection and data protection through plug-ins. Trend Micro OfficeScan cgiShowClientAdm.exe suffers fro...

Broadcom BCM4355C0 Wi-Fi chips information disclosure vulnerability

The Broadcom BCM4355C0 Wi-Fi chips is a WIFI chip. An information disclosure vulnerability exists in the Broadcom BCM4355C0 Wi-Fi chips processing messages, which allows remote attackers to exploit the vulnerability by submitting a special request that can be used to obtain sensitive information...

OpenVPN 'read_key()' function buffer overflow vulnerability

OpenVPN is an open source VPN program. A buffer overflow vulnerability exists in the OpenVPN 'readkey' function, which allows remote attackers to exploit the vulnerability by submitting a special request that could crash the application or execute arbitrary code...

Google Android Huawei bootloader elevation of privilege vulnerability

Android is a free and open-source Linux-based operating system for mobile devices such as smartphones and tablets, led and developed by Google Inc. and the Open Handset Alliance. A security vulnerability exists in the Android Huawei bootloader that allows an attacker to exploit the vulnerability ...

The vulnerability in the web interface of the TP-Link wireless router allows a hacker to cause a complete failure in the service of the web interface server.

The vulnerability of the web interface of the TP-Link wireless router is caused by resource management errors. Exploiting this vulnerability allows a malicious actor to completely disable the web interface by using a specially crafted request. To restore the web interface, the device must be...

CVE-2017-14493

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted DHCPv6 request...

CVE-2017-14493

A stack buffer overflow was found in dnsmasq in the DHCPv6 code. An attacker on the local network could send a crafted DHCPv6 request to dnsmasq which would cause it to a crash or, potentially, execute arbitrary code...

UBUNTU-CVE-2017-14493

Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted DHCPv6 request...

CVE-2017-1577

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 132117...

Nodejs V8 Debugger Remote Code Execution

A remote code execution vulnerability is exist in Node.js v8 debugger. A remote attacker can exploit this weakness to execute arbitrary code in the Nodejs server via a crafted request...

Schneider Electric ClearSCADA Memory Allocation Vulnerability

Schneider Electric ClearSCADA is an open software platform that allows remote management of critical architectures. A memory allocation vulnerability exists in Schneider Electric ClearSCADA that could be exploited by an attacker to submit a special request for a denial of service attack...