F5 Networks BIG-IP : PHP vulnerability (K64412100)

Multiple integer overflows in the mbflstrcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted mbstrcut call...

PHP DEP Violation Remote Code Execution Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A...

Virglrenderer Denial of Service Vulnerability (CNVD-2017-02435)

Virglrenderer is a library for maintaining API stability in Virgil 3d projects. A denial of service vulnerability exists in Virglrenderer. An attacker could exploit this vulnerability to launch a denial of service attack...

Geutebruck G-Cam/EFD-2250 Remote Code Execution Vulnerability

The Geutebruck G-Cam/EFD-2250 provides a faster and more secure solution for remote monitoring applications. A remote code execution vulnerability exists in the Geutebruck G-Cam/EFD-2250. An attacker could exploit this vulnerability to execute arbitrary code. A failed attack would result in a...

The vulnerability of the Samsung operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the SmartCall Activity component in the Telecom operating system of the Samsung Mobile device is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or increase their privileges...

The vulnerability of the Samsung operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the SpamCall Activity component in the Telecom operating system of Samsung Mobile is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions or increase their privileges...

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of librm in NVIDIA’s Android operating system systems is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or otherwise affect the system.

The vulnerability of the ION subsystem, Binder, USB drivers, and the network subsystem of the Android operating system is related to the lack of protection for sensitive data. Exploiting this vulnerability can allow a malicious actor to cause service failures or otherwise affect the system...

CVE-2016-2787

The Puppet Communications Protocol in Puppet Enterprise 2015.3.x before 2015.3.3 does not properly validate certificates for the broker node, which allows remote non-whitelisted hosts to prevent runs from triggering via unspecified vectors...

The vulnerabilities of the library that provides system calls and core functions in glibc allow a malicious actor to cause a service failure or execute arbitrary code.

Multiple vulnerabilities exist in the functions senddg and sendvc of the libresolv module’s library, which provides system calls and core functions for the glibc library. These vulnerabilities allow a malicious actor to trigger service failures or execute arbitrary code through a specially crafte...

Huawei HwVmall Local Security Bypass Vulnerability

Huawei HwVmall is a set of e-commerce platform for national service. A security vulnerability exists in the AlarmService service component in Huawei HwVmall versions prior to 1.5.2.0. The vulnerability stems from the fact that the program does not have invocation privilege control, and can be...

Vulnerability of the Server component: DML of the MySQL database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component in the MySQL database management system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the system to become unresponsive or, in rare cases, to crash using network...

Vulnerability of the Server component: The character sets of the MySQL database management system, which allows attackers to trigger service interruptions.

Vulnerability of the Server component: The character sets of the MySQL database management system are vulnerable due to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash using...

EMC Documentum D2 DQL Injection Vulnerability

EMC Documentum D2 is an enterprise-class content management system from EMC. The system manages the entire information lifecycle through creation, modification, tracking and other functions, and it includes a number of extensions, such as Documentum Web Publisher Web Content Management, Documentu...

CVE-2016-9873

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information,...

Design/Logic Flaw

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information,...

CVE-2016-9873

EMC Documentum D2 version 4.5 and EMC Documentum D2 version 4.6 has a DQL Injection Vulnerability that could potentially be exploited by malicious users to compromise the affected system. An authenticated low-privileged attacker could potentially exploit this vulnerability to access information,...

PT-2017-10372

Name of the Vulnerable Software and Affected Versions EMC Documentum D2 versions 4.5 through 4.6 Description The issue allows an authenticated low-privileged attacker to potentially exploit it and access information, modify data, or disrupt services by causing execution of arbitrary DQL commands ...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary commands

The vulnerability of the initial loader of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a local attacker to execute arbitrary commands on the device’s modem. This issue is considered “high” because it causes continuous service...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the Ffmpeg component in the Google Chrome browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially created video file...