8809 matches found
VMware AirWatch Console updates address Broken Access Control vulnerability.
VMware AirWatch Console AWC Broken Access Control VMware AirWatch Console AWC contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator. The Common Vulnerabilities and Exposures...
CVE-2017-1606
IBM Financial Transaction Manager FTM for Multi-Platform MP 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID:...
CVE-2017-1356
IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126683...
IBM Financial Transaction Manager SQL Injection Vulnerability
IBM Financial Transaction Manager FTM for Multi-Platform MP is a cross-platform financial transaction manager from IBM, USA, which is used to monitor, track and report on financial payments and transactions. A SQL injection vulnerability exists in IBM FTM for MP versions 3.0.0.0 through 3.0.0.7,...
IBM Atlas eDiscovery Process Management SQL Injection Vulnerability
IBM Atlas eDiscovery Process Management is a product within the Information Lifecycle Governance solution from IBM USA that is used to help attorneys, paralegals, and evidence supervisors rigorously and logically manage legal evidence retention workflows. A SQL injection vulnerability exists in I...
UBUNTU-CVE-2017-17121
The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service memory access violation or possibly have unspecified other impact via a COFF binary in which a relocation refers to a location after the end of the...
FTP wildcard out of bounds read
libcurl contains a read out of bounds flaw in the FTP wildcard function. libcurl's FTP wildcard matching feature, which is enabled with the CURLOPTWILDCARDMATCH option can use a built-in wildcard function or a user provided one. The built-in wildcard function has a flaw that makes it not detect t...
UBUNTU-CVE-2017-16944
The receivemsg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service infinite loop and stack exhaustion via vectors involving BDAT commands and an improper check for a '.' character signifying the end of the content, related to the...
DEBIAN-CVE-2017-16944
The receivemsg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service infinite loop and stack exhaustion via vectors involving BDAT commands and an improper check for a '.' character signifying the end of the content, related to the...
BlueTech Enterprise Website Management System (PHP version) front-end arbitrary file download vulnerability
BlueTech Enterprise Website Management System PHP version is developed with PHP+MYSQL technology and MVC mode. Support pseudo-static function, can generate google and baidu map, support custom url, keywords and description, in line with SEO standards. BlueTech enterprise website management system...
Multiple Huawei products cross the border to read vulnerabilities
Huawei DP300, RP200, RSE6500, TX50, VP9660, TE series and ViewPoint series are Huawei's all-in-one desktop and HD video conferencing end products for high-end customers. An out-of-bounds read vulnerability exists in multiple Huawei products, due to the device failing to adequately validate user...
Threat Outbreak Alert RuleID31313: Email Messages Distributing Malicious Software on November 15, 2017
Medium Alert ID: 55936 First Published: 2017 November 15 20:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31313 may contain the following files: Name |...
SQL injection vulnerabililty in the back end search filter and the front end listing module
More info at https://contao.org/en/news/contao-3531.html...
SQL injection vulnerabililty in the front end listing module
More info at https://contao.org/en/news/contao-448.html...
SQL injection vulnerabililty in the back end search filter
More info at https://contao.org/en/news/contao-448.html...
SQL injection vulnerabililty in the back end search filter
More info at https://contao.org/en/news/contao-448.html...
SQL injection in the back end search filter and the listing module
Date : 2017-11-15 CVE ID : CVE-2017-16558 Description Both the search filter in the back end and the listing module in the front end are vulnerable to SQL injections. To exploit the vulnerability in the back end, a back end user has to be logged in, whereas the front end the vulnerability can be...
[SECURITY] Fedora 25 Update: sssd-1.15.3-5.fc25
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a plug-gable back-end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
The vulnerability of the asf_build_simple_index() function in the FFmpeg multimedia library (libavformat/asfdec_f.c) allows a attacker to cause a service failure.
The vulnerability of the asfbuildsimpleindex function in the FFmpeg multimedia library libavformat/asfdecf.c arises from the lack of checking for the end-of-file flag during the processing of ASF files. This leads to repeated execution of the for loop, which is related to the large size of the...
The vulnerability of the read_tfra() function in the FFmpeg multimedia library (libavformat/mov.c) allows a attacker to cause a service failure.
The vulnerability of the readtfra function in the FFmpeg multimedia library libavformat/mov.c arises from the lack of checking for the end-of-file flag during the processing of MOV files. This is related to the extensive loop iteration associated with a large value of the “itemcount” field in the...