The vulnerability of the Apache HttpClient client module of Apache HttpComponents (http/impl/client/HttpClientBuilder.java) allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Apache HttpClient client module of the Apache server http/impl/client/HttpClientBuilder.java is related to insufficient validation of input data X509HostnameVerifier. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity,...

CVE-2017-14967

In IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x83000080...

CVE-2017-17799

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x82730068...

CVE-2017-17802

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273E080...

CVE-2017-17797

In IKARUS anti.virus 2.16.20, the driver file ntguard.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000058...

Numerical Calculation Error Vulnerability in Multiple Huawei Router Products

Huawei S12700 and others are intelligent routing switches from Huawei China. A numeric miscalculation vulnerability exists in several Huawei router products, which stems from the program failing to adequately validate messages. The vulnerability can be exploited to cause a reset of the affected...

Cisco UCS Central Software Cross-Site Scripting Vulnerability (CNVD-2017-36134)

Cisco UCS Central Software is the United States Cisco Cisco company's set of global Cisco UCS Unified Computing System resources for server management and monitoring solutions. A cross-site scripting vulnerability exists in the web-based management interface of Cisco UCS Central Software, which...

Huawei Baggio-L03A Denial of Service Vulnerability

Huawei Baggio-L03A is a smartphone from Huawei. The Huawei Baggio-L03A suffers from a denial-of-service vulnerability that can be exploited by an attacker to cause certain processes on the device to crash due to the device's failure to adequately validate user input by sending a specific NFC...

CVE-2017-14961

In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8300000c...

Cisco Wireless LAN Controller Denial of Service Vulnerability (CNVD-2017-32921)

Cisco Wireless LAN Controller WLC is a wireless LAN controller product from Cisco USA. The product provides security policy, intrusion detection and other functions in the wireless LAN. A denial of service vulnerability exists in the implementation of the 802.11v Basic Service Set BSS Transition...

Intel NUC Suite SMM Elevation of Privilege Vulnerability

Intel NUC7i3BNK, etc. are CPU Central Processing Unit products of Intel Corporation USA. An elevation of privilege vulnerability exists in the system firmware of multiple Intel products, which stems from a program's failure to adequately validate input. An attacker can exploit the vulnerability b...

Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2017-34214)

The Cisco Catalyst 3650 and 3850 switches are both switch products from Cisco, Inc.IOS XE Software is one of the operating systems used for network devices. wireless controller manager is one of the wireless controller management programs. A denial of service vulnerability exists in the wireless...

Authorization

vBulletin 5.x through 5.1.6 allows remote authenticated users to bypass authorization checks and inject private messages into conversations via vectors related to an input validation failure...

CVE-2017-8711

The Windows Hyper-V component on Microsoft Windows 10 1607 and Windows Server 2016 allows an information disclosure vulnerability when it fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Information Disclosure Vulnerability". This CVE ID is...

Microsoft Windows Hyper-V Information Disclosure Vulnerability (CNVD-2017-32912)

Microsoft Windows is a family of operating systems from Microsoft Corporation, U.S.A. Hyper-V is one of the virtualization products. An information disclosure vulnerability exists in Hyper-V in Microsoft Windonws Server 2016, Windonws 10 version 1703, and Windonws 10 version 1607, which stems fro...

Concrete5 cross-site scripting vulnerability (CNVD-2017-32458)

concrete5 is a free content management system CMS. The system can be edited and typeset directly on the page. A cross-site scripting vulnerability exists in concrete5 version 5.7.3.1, which stems from the program failing to validate or encrypt user-submitted input. A remote attacker can exploit...

Pi Engine Cross-Site Scripting Vulnerability

PI Engine is an open-source CMS system that is more widely used within some Internet companies. A cross-site scripting vulnerability exists in PI Engine, which stems from the program failing to properly validate user-supplied input. When an unsuspecting user browses the affected site, an attacker...

Multiple Cross-Site Scripting Vulnerabilities in Splunk Enterprise and Lite

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze machine-generated data, including data generated by all IT systems and infrastructures physical, virtual, and cloud.Splunk Enterprise is...

IBM Curam Social Program Management Cross-Site Scripting Vulnerability (CNVD-2017-08126)

IBM Curam Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. IBM Curam Social Program Management suffers from a cross-site scripting vulnerability that originates from the program...

CVE-2017-6636

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 11.1 could allow an authenticated, remote attacker to view any file on an affected system. The vulnerability exists because the affected software does not perform proper input validation of HT...