CVE-2018-17692

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF 9.2.0.9297. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Shop7z Online Shopping System Fashion Edition Frontend Sh***.asp File SQL Injection Vulnerability

Shop7z online shopping system is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer and cell phone version and APP seamless combination of data as a whole. Shop7z online shopping system fashion version of the front Sh.asp file SQL injection vulnerability...

January 17, 2019—KB4480977 (OS Build 14393.2759)

None None...

Design/Logic Flaw

A vulnerability stemming from failure to properly clean up closed OMAPI connections can lead to exhaustion of the pool of socket descriptors available to the DHCP server. Affects ISC DHCP 4.1.0 to 4.1-ESV-R15, 4.2.0 to 4.2.8, 4.3.0 to 4.3.6. Older versions may also be affected but are well beyond...

Reminder: Microsoft to end support for Windows 7 in 1-year from today

A new reminder for those who are still holding on to the Windows 7 operating system—you have one year left until Microsoft ends support for its 9-year-old operating system. So it's time for you to upgrade your OS and say goodbye to Windows 7, as its five years of extended support will end on...

Reminder: Microsoft to end support for Windows 7 in 1-year from today

A new reminder for those who are still holding on to the Windows 7 operating system—you have one year left until Microsoft ends support for its 9-year-old operating system. So it's time for you to upgrade your OS and say goodbye to Windows 7, as its five years of extended support will end on...

Alex Stamos on Content Moderation and Security

Former Facebook CISO Alex Stamos argues that increasing political pressure on social media platforms to moderate content will give them a pretext to turn all end-to-end crypto off -- which would be more profitable for them and bad for society. If we ask tech companies to fix ancient societal ills...

Cross-site Scripting (XSS)

pki-util is vulnerable to cross-site scripting XSS attacks. The vulnerability exists through multiple cross-site scripting XSS vulnerabilities in Red Hat Certificate System RHCS before 8.1.1 and Dogtag Certificate System allow remote attackers to inject arbitrary web script or HTML via unspecifie...

January 15, 2019—KB4480959 (OS Build 15063.1596)

None None...

Mozilla Kills Default Support for Adobe Flash in Firefox 69

Mozilla is disabling default support for Adobe’s Flash Player plugin in the latest upcoming version of its FireFox browser, marking the latest step in end-of-life for the infamous plugin. The disabled default support means that Firefox users will now be required to manually enable Adobe Flash in...

Logic flaw vulnerability in yershop open source online store system (CNVD-2019-04592)

yershop open source online store system is a thinkphp5-based mall system with a key to generate controllers , models , validators , templates , general additions and deletions , and other functions. yershop open source online store system there is a logic flaw vulnerability , the vulnerability...

January 8, 2019—KB4480961 (OS Build 14393.2724)

None None...

January 8, 2019—KB4480973 (OS Build 15063.1563)

None None...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2018-1904)

Summary Websphere Application Server WAS is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Potential Remote code execution...

Notice of Change Announcement for Citrix ADC SDX 22100, SDX 22120, SDX 24100, and SDX 24150

Note: 22xxx/24xxx upgrade SKUs and 22xxx/24xxxZ upgrade SKUs for these models will be available until the year before EOL Citrix Systems, Inc. announces a Notice of Status Change for the Citrix ADC NetScaler MPX 22040, MPX 22060, MPX 22080, MPX 22100, MPX 22120 MPX 24100, MPX 24150, SDX 22040, SD...

Debian DLA-1622-1 : debian-security-support security update

debian-security-support, the Debian security support coverage checker, has been updated in jessie. The jessie relevant changes are : - Mark jasperreports as end-of-life in Jessie. - Mark webkit2gtk as unsupported in all releases. Closes: 914567 - Mark jruby in jessie as end-of-life as per...

Sql injection

Battelle V2I Hub 2.5.1 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statements to /api/PluginStatusActions.php and /status/pluginStatus.php using the jtSorting or id parameter, which could allow the attacker to view, add, modify or delete...

SQL Injection Vulnerability in Purchase Frontend pr***.aspx Page of Purchase System

Purchase system Purchase is a purchasing management system features include: product requisitioning, warehousing, inventory counts, data reports and more. A SQL injection vulnerability exists in the front-end pr.aspx page of Purchase, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Bidding System Bid Frontend ge***.aspx Page

Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...

SQL Injection Vulnerability in eDoc Front-end ge***.aspx Page

Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc front ge.aspx page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...