PT-2017-12446 · Cisco · Cisco Spa500 Series Ip Phones +1

Name of the Vulnerable Software and Affected Versions: Cisco SPA300 and SPA500 Series IP Phones affected versions not specified Description: A lack of cross-site request forgery CSRF protection in the Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to...

CVE-2017-5247

Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An authenticated user with permissions to upload or send files can populate this field with a filename that contains standard HTML scripting tags. The resulting script will evaluated by any other authenticat...

PT-2017-10500 · Microsoft · Windows Gdi +2

Name of the Vulnerable Software and Affected Versions: Windows GDI component affected versions not specified Description: The issue allows attackers to obtain sensitive information and affect the system. It is an information disclosure vulnerability that exists when the Windows GDI component...

PT-2017-10499 · Microsoft · Windows Gdi +2

Name of the Vulnerable Software and Affected Versions: Windows GDI component affected versions not specified Description: The issue is related to an information disclosure problem where the Windows GDI component improperly discloses its memory contents. This could allow an attacker to obtain...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. In Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc, which allows attackers to cause a denial of service via a crafted file. Remediation There is no fixed version for poppler...

PT-2017-18770 · Martin Weber +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a "left shift" problem that cannot be represented in type int, located in input-bmp.c at line 516, column 63. This is a problem in the libautotrace.a library of AutoTrace...

PT-2017-18754 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer overflow in the ReadImage function, located in the input-bmp.c file. This function is susceptible to overflow, potentially leading to unintended program behavio...

PT-2017-2143 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: A remote code execution issue exists due to improper memory object access. This could allow a remote attacker to execute arbitrary code or cause memory corruption. The vulnerabili...

PT-2017-1865 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: The issue is related to insufficient access control in Internet Explorer, allowing a remote attacker to elevate their privileges. This can enable the attacker to access informatio...

[SECURITY] [DLA 891-1] libnl security update

Package : libnl Version : 1.1-7+deb7u1 CVE ID : CVE-2017-0553 Debian Bug : It was discovered that there was a FIXME in libnl, a FIXME... For Debian 7 "Wheezy", this issue has been fixed in libnl version 1.1-7+deb7u1. We recommend that you upgrade your libnl packages. Regards, - -- ,. : : : Chris...

PT-2017-17368 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.5 Description: The issue concerns a denial of service caused by a NULL pointer dereference in the GraphicsStack::TGraphicsStackElement::TGraphicsStackElement function, located in graphicsstack.h. This can be triggered by...

PT-2017-1935

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue exists due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. This allows a remote attacker to execute arbitrary code using...

PT-2017-1938

Name of the Vulnerable Software and Affected Versions microsoft server message block 1.0 Description The issue exists due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. This allows a remote attacker to execute arbitrary code using specially craft...

PT-2016-3138 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue is related to a missing malloc check in the coders/ipl.c component of ImageMagick, which can be exploited by remote attackers to have an unspecific impact. Recommendations: At...

PT-2018-5097 · Openjpeg +3 · Openjpeg +3

Name of the Vulnerable Software and Affected Versions: openjpeg version 2.1.2 Description: An integer overflow issue was discovered in the tiftoimage function, leading to a heap buffer overflow. Recommendations: For openjpeg version 2.1.2, at the moment, there is no information about a newer...

Netgear Routers Remain Exposed to Critical Flaw

At least three versions—and likely more—of Netgear routers remain vulnerable to a vulnerability that allows an attacker to gain root access on the device and remotely run code. A researcher who goes by the handle AceW0rm on Friday released details and a proof-of-concept exploit after months of...

PT-2016-4508 · Huge It · Huge-It Portfolio Gallery Manager

Name of the Vulnerable Software and Affected Versions: Huge-IT Portfolio Gallery manager version 1.1.0 Description: The issue concerns SQL Injection and XSS in the Huge-IT Portfolio Gallery manager. No further details are provided about the nature of the issue, affected devices, or real-world...

PT-2016-2987 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing a remote attacker to potentially execute arbitrary code or cause a denial of service memory corruption...

PT-2016-2986 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing a remote attacker to potentially execute arbitrary code or cause a denial of service memory corruption...

PT-2016-5371 · Apache +1 · Apache Http Server +1

Name of the Vulnerable Software and Affected Versions: Red Hat JBoss Web Server version 2.1 Description: The issue allows remote attackers to cause a denial of service, resulting in an Apache http server crash. This is achieved by sending an MCMP message that contains a series of = equals...