Local Elevation of Privilege Vulnerability in Multiple Cisco Products

Cisco Unified Computing System UCS Manager provides unified, embedded management of all software and hardware components in Cisco UCS. Cisco Firepower 4100 Series Next-Generation Firewall NGFW is the industry's first fully integrated, threat-oriented, next-generation firewall with unified...

Cisco IOS XE Software Local Command Execution Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. The Cisco IOS XE Software startup script does not validate the value of the ROMMON variable effectively, allowing remote attackers to exploit the vulnerability by submitting a specia...

Microsoft IIS WebDAV ScStoragePathFromUrl Buffer Overflow (CVE-2017-7269)

A buffer overflow exists in Microsoft Internet Information Services 6.0. The vulnerability is due to improper validation of a long header in HTTP request. A remote attacker could exploit this vulnerability by sending a crafted request over a network to the vulnerable application. Successful...

Cross site scripting

Reflected Cross-site scripting XSS vulnerability in Yii Framework before 2.0.11, when development mode is used, allows remote attackers to inject arbitrary web script or HTML via crafted request data that is mishandled on the debug-mode exception screen...

CVE-2017-7271

Reflected Cross-site scripting XSS vulnerability in Yii Framework before 2.0.11, when development mode is used, allows remote attackers to inject arbitrary web script or HTML via crafted request data that is mishandled on the debug-mode exception screen...

Cisco Nexus 9000 Series Switches NX-OS Software Denial of Service Vulnerability

Cisco Nexus 9000 Series Switches are 9000 series switches from Cisco, USA. A denial of service vulnerability exists in the remote login feature of the Cisco NX-OS Software in Cisco Nexus 9000 Series Switches. A remote attacker could exploit the vulnerability by sending a special request to...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a hacker to bypass access control rules.

The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass access control rules using a specially crafted HTTP request...

Cisco IOS XE Software L2TP Message Denial of Service Vulnerability

Cisco IOS XE Software is an operating system developed by Cisco in the United States for its network devices. Cisco IOS XE Software's fails to adequately filter L2TP packets. A remote attacker could exploit this vulnerability to submit a special request for a denial of service attack...

The vulnerability of the McAfee VirusScan Enterprise anti-virus software allows a hacker to bypass the sandbox mechanism or cause a service failure.

The vulnerability of the McAfee VirusScan Enterprise antivirus software is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to bypass the sandbox mechanism or trigger a service failure through a specially crafted HTTP request...

CVE-2017-0055

Microsoft Internet Information Server IIS in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to perform cross-site scripting and run...

HP Intelligent Management Center Arbitrary File Download Vulnerability

HP Intelligent Management Center is a set of network intelligent management center solutions from Hewlett-Packard HP. A security vulnerability exists in HP Intelligent Management Center that could be exploited by remote attackers to submit a specific request to download arbitrary files...

Microsoft Hyper-V Network Switch Denial of Service Vulnerability

Microsoft Windows is a popular operating system.Hyper-V is one of the virtualization products. A security vulnerability in the Hyper-V network switch for Microsoft Windows allows an attacker to exploit the vulnerability to crash the system via a specially crafted request...

CVE-2017-6367

In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology involves a long Host header and an invalid Content-Length header...

CVE-2016-9726

IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM Reference : 1999542...

DNS Spoofing Vulnerability in Multiple Veritas Products

Veritas NetBackup Appliance is an enterprise-class backup management appliance; NetBackup Server is a set of enterprise-class backup management servers that can run on multiple operating systems. A DNS spoofing vulnerability exists in multiple Veritas products, which can be exploited by remote...

Denial of Service Vulnerability in Multiple Veritas Products

Veritas NetBackup Appliance is an enterprise-class backup management appliance; NetBackup Server is a set of enterprise-class backup management servers that can run on multiple operating systems. A denial of service vulnerability exists in multiple Veritas products, which can be exploited by remo...

Cisco NetFlow Generation Appliance SCTP decoder denial of service vulnerability

Cisco NetFlow Generation Appliance is the United States Cisco Cisco company's set of scalable for data centers to achieve traffic visibility solutions. A denial of service vulnerability exists in the processing of SCTP messages by the SCTP decoder in the Cisco NetFlow Generation Appliance. A remo...

QEMU Denial of Service Vulnerability (CNVD-2017-02735)

QEMU is a suite of analog processor software. A security vulnerability exists in QEMU that allows an attacker to submit a special request that can be exploited to crash an application...

NetCommWireless Wireless Router Remote Command Injection Vulnerability

NetCommWireless Wireless Router is a wireless router from NetComm Australia. A security vulnerability exists in NetCommWireless Wireless Router that allows remote attackers to submit a special request to execute arbitrary commands in an application context...

TigerVNC Buffer Overflow Vulnerability

TigerVNC is an advanced implementation of VNC remote access. TigerVNC suffers from a buffer overflow vulnerability that allows an attacker to submit a special request to execute arbitrary code in the context of an application...