Design/Logic Flaw

An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "UIKit" component. It allows attackers to bypass intended read restrictions for secure text fields via vectors involving a focus-change event...

CVE-2017-7113

The CVE-2017-7113 entry affects Apple iOS prior to 11.1 and specifically targets the UIKit component. The issue allows characters in a secure text field to be revealed during focus-change events, indicating a local-type disclosure vulnerability in the secure input handling. The Apple security pag...

CVE-2017-7113

An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "UIKit" component. It allows attackers to bypass intended read restrictions for secure text fields via vectors involving a focus-change event...

Internet Bug Bounty: CVE-2017-13090 wget heap smash

The retr.c:fdreadbody function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to read the chunk in piec...

Apache Solr XEE and RCE Vulnerability (SOLR-11477) - Linux

Apache Solr is vulnerable to an XML Entity Expansion XEE vulnerability leading to remote code execution RCE. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Office Word Viewer Remote Code Execution Vulnerability (KB4011236)

This host is missing an important security update according to Microsoft KB4011236 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Apache Struts Path Traversal Vulnerability (S2-042) - Linux

Apache Struts is prone to a path traversal vulnerability. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Micro Focus VisiBroker Read Across Boundaries Vulnerability

Micro Focus VisiBroker is a CORBA environment for developing, deploying and managing distributed applications from Micro Focus, UK. An out-of-bounds read vulnerability exists in Micro Focus VisiBroker version 8.5. No information about this vulnerability is available at this time...

Micro Focus VisiBroker integer overflow vulnerability (CNVD-2017-34016)

Micro Focus VisiBroker is a CORBA environment for developing, deploying and managing distributed applications from Micro Focus, UK. An integer overflow vulnerability exists in Micro Focus VisiBroker version 8.5. No information about this vulnerability is available at this time...

CVE-2017-9282

An integer overflow CWE-190 led to an out-of-bounds write CWE-787 on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed...

Design/Logic Flaw

An out-of-bounds read CWE-125 vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed...

CVE-2017-9281

An integer overflow CWE-190 potentially causing an out-of-bounds read CWE-125 vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service...

Integer overflow

An integer overflow CWE-190 potentially causing an out-of-bounds read CWE-125 vulnerability in Micro Focus VisiBroker 8.5 can lead to a denial of service...

CVE-2017-9283

An out-of-bounds read CWE-125 vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed...

Integer overflow

An integer overflow CWE-190 led to an out-of-bounds write CWE-787 on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed...

CVE-2017-9282

An integer overflow CWE-190 led to an out-of-bounds write CWE-787 on a heap-allocated area, leading to heap corruption in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed...

CVE-2017-9283

An out-of-bounds read CWE-125 vulnerability exists in Micro Focus VisiBroker 8.5. The feasibility of leveraging this vulnerability for further attacks was not assessed...

CVE-2017-9283

CVE-2017-9283 affects Micro Focus VisiBroker 8.5. The vulnerability is an out-of-bounds read (CWE-125) in VisiBroker 8.5. The connected sources indicate related memory‑corruption vulnerabilities in 8.5 SP2/8.5 SP4 HF3 lines, but do not provide exploit details. In SEC Consult/SEC reports, a fixed ...

CVE-2017-9282

CVE-2017-9282 affects Micro Focus VisiBroker 8.5 (VisiBroker C/C++) where an integer overflow (CWE-190) leads to a heap-allocated out-of-bounds write (CWE-787) and consequent heap corruption. The CVE entry cites a high/severe impact (NVD CVSS v3: 9.8, Critical) with network attack vector and no u...

Bitdefender Total Security 'bdfwfpf' Kernel Driver Privilege Escalation Vulnerability

Bitdefender Total Security is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...