Trend Micro Smart Protection Server Remote Denial of Service Vulnerability

Trend Micro Smart Protection Server Standalone is a server that provides smart protection from Trend Micro. A security vulnerability exists in version 3.x of Trend Micro Smart Protection Server Standalone. A remote attacker could exploit this vulnerability by sending a large number of specially...

dalek-browser-chrome-canary code execution vulnerability

dalek-browser-chrome-canary is a plugin for the DalekJS browser for Google Chrome. A security vulnerability exists in dalek-browser-chrome-canary that originates when the program downloads binary resources over the HTTP protocol. A remote attacker could exploit the vulnerability by replacing the...

strider-sauce code execution vulnerability

strider-sauce is a package for installing and deploying Strider. A security vulnerability exists in strider-sauce that originates when the program downloads compressed resources over the HTTP protocol. A remote attacker could exploit the vulnerability by replacing the requested zip file with a zi...

Webdrvr Code Execution Vulnerability

webdrvr is a browser automation framework. A security vulnerability exists in webdrvr that originates when the program downloads binary resources over the HTTP protocol. A remote attacker could exploit the vulnerability by replacing the requested binary with a binary under their control to execut...

CVE-2016-10590

cue-sdk-node is a Corsair Cue SDK wrapper for node.js. cue-sdk-node downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested zip file with an attacker controlled zip file if the attacker i...

Moodle Design Vulnerability (CNVD-2018-10648)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in version 3.x of Moodle. An attacker could exploit th...

Unspecified Content Spoofing Vulnerability in SAP NetWeaver Application Server Java Web Container and HTTP Service

SAP NetWeaver is Germany's SAP SAP company's set of service-oriented integrated application platform, the platform can provide development and operation environment for SAP applications. Application Server Java Web Container is one of the Java application running environment; HTTP Service is an...

SAP Internet Graphics Server HTTP and RFC listener denial of service vulnerability

SAP Internet Graphics Server IGS is a graphics server from SAP, Germany. The product is able to generate graphs or charts in different areas.HTTP is one of the hypertext transfer protocols; RFC listener is one of the RFC listener. A security vulnerability exists in HTTP and RFC listener in SAP IG...

Redhat Mobile Application Platform HTML Injection Vulnerability

RHMAP is a mapping statistics package. app Studio component is one of the app development components. A security vulnerability exists in the App Studio component in RHMAP version 4.4. An attacker can exploit the vulnerability to execute script code or HTML in the context of a browser...

Here's How eFail Attack Works Against PGP and S/MIME Encrypted Emails

With a heavy heart, security researchers have early released the details of a set of vulnerabilities discovered in email clients for two widely used email encryption standards—PGP and S/MIME—after someone leaked their paper on the Internet, which was actually scheduled for tomorrow. PGP and S/MIM...

Arbitrary Code Execution Vulnerability in HTTP Request Parser of Multiple Schneider Electric Products

Schneider Electric Modicon M340 and others are programmable logic controller products from Schneider Electric France.HTTP request parser is one of the HTTP request parsers. A security vulnerability exists in the HTTP request parser in several Schneider Electric products. A remote attacker could...

Lenovo Help Android mobile app information disclosure vulnerability

Lenovo Help Android is an Android-based mobile application from Lenovo, a Chinese company, for getting support for Lenovo products. A security vulnerability exists in the Lenovo Help Android mobile application prior to version 6.1.2.0327, which can be exploited to obtain information over an HTTP...

emforster.de XSS vulnerability

Open Bug Bounty ID: OBB-611287 Description| Value ---|--- Affected Website:| emforster.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

May 1, 2018, update for Office 2016 (KB4022133)

None None...

VirtueMart Cross-Site Scripting Vulnerability

VirtueMart is an open source e-commerce solution compatible with Joomla! The solution supports 128-bit HTTPS encryption, support for different language switching and currency switching and other features. A cross-site scripting vulnerability exists in versions prior to VirtueMart 3.2.14. A remote...

CVE-2016-8384

An exploitable heap corruption vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter...

chromium-browser: Incorrect handling of plaintext files via file://

Parsing documents as HTML in Downloads in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to cause Chrome to execute scripts via a local non-HTML page...

Apple macOS High Sierra Mail Man-in-the-Middle Attack Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple Inc. for Mac computers.Mail is one of the email components. A security vulnerability exists in the handling of S/MIME HTML email messages in the Mail component in Apple macOS High Sierra versions prior to 10.13.4. An...

CVE-2018-2879

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Authentication Engine. Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2849

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged attacker with network...