CVE-2018-0115

A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series routers could allow an authenticated, local attacker to execute arbitrary commands with root privileges on an affected host operating system. The vulnerability is due to insufficient validation of...

Malwarebytes Premium Denial of Service Vulnerability (CNVD-2018-02558)

Malwarebytes Premium is a suite of anti-malware spyware from the American company Malwarebytes. The software supports the removal of worms, dial-up programs, Trojans, rootkits, spyware, exploits, bots, and other malware, among others. A security vulnerability exists in the FARFLT.SYS driver file ...

CVE-2018-5087

In K7 AntiVirus 15.1.0306, the driver file K7FWHlpr.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83002100...

CVE-2018-5086

In K7 AntiVirus 15.1.0306, the driver file K7FWHlpr.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300215F...

CVE-2018-5083

In K7 AntiVirus 15.1.0306, the driver file K7FWHlpr.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8300215B...

The vulnerability of Google Chrome’s Skia graphics library allows a hacker to perform memory-reading operations beyond the limits of the application’s memory.

The vulnerability of Google Chrome’s Skia graphics library exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform memory-walking attacks using a specially crafted HTML page...

CVE-2017-15310

Huawei iReader app before 8.0.2.301 has an arbitrary file deletion vulnerability due to the lack of input validation. An attacker can exploit this vulnerability to delete specific files from the SD card...

IKARUS anti.virus ntguard.sys driver arbitrary write vulnerability (CNVD-2017-37946)

IKARUS anti.virus is the Austrian IKARUS Security Software company a set of antivirus software products. ntguard.sys driver is one of the self-protection system driver . IKARUS anti.virus version 2.16.18 before the ntguard.sys driver has an arbitrary write vulnerability, the vulnerability stems...

Huawei DP300 CIDAM Protocol Input Validation Vulnerability (CNVD-2017-38104)

Huawei DP300 is a video conferencing terminal from Huawei, China.CIDAM is one of the messaging protocols. An input validation vulnerability exists in the CIDAM protocol in the Huawei DP300 due to the program failing to adequately validate specific information. A remote attacker could exploit this...

CVE-2017-17795

In IKARUS anti.virus 2.16.20, the driver file ntguard.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000088...

CVE-2017-17798

In TG Soft Vir.IT eXplorer Lite 8.5.42, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17800...

CVE-2017-17804

In IKARUS anti.virus 2.16.20, the driver file ntguard.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x83000084...

The vulnerability of the SSH Dropbear session management software lies in insufficient input data validation, allowing an attacker to execute arbitrary code.

The vulnerability of the SSH Dropbear session management software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the “dropbearconvert” command, with the help of a specially crafted OpenSSH key file...

The vulnerability of the fd_read_body() function in the Wget software for downloading files over the network allows a attacker to execute arbitrary code.

The vulnerability of the fdreadbody function in the Wget network-files downloading software is related to insufficient input validation, which leads to buffer overflows. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

IBM DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2017-38359)

IBM Rational DOORS Next Generation DNG/RRC is a suite of software for capturing, tracking, analyzing, and managing requirements from IBM, USA. The software provides a single platform for global team collaboration to manage requirements more efficiently, sharing unified users, servers and project...

CVE-2017-8213

Huawei SMC2.0 with software of V100R003C10, V100R005C00SPC100, V100R005C00SPC101B001T, V100R005C00SPC102, V100R005C00SPC103, V100R005C00SPC200, V100R005C00SPC201T, V500R002C00, V600R006C00 has an input validation vulnerability when handle TLS and DTLS handshake with certificate. Due to the...

CVE-2017-16237

In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file VIAGLT64.SYS contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x8273007C...

CVE-2017-12277

A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall NGFW and Firepower 9300 Security Appliance could allow an authenticated, remote attacker to inject arbitrary commands that could be executed with root privileges. The vulnerability i...

CVE-2017-10953

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.14878. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Mahara Resume Blocktype Cross-Site Scripting Vulnerability

Mahara is an open source e-folder, weblog, resume generator and social networking system. A cross-site scripting vulnerability exists in the resume blocktype in Mahara versions prior to 1.0.13 and 1.1.x prior to 1.1.7, where Mahara fails to properly validate input parameters passed to the resume...