Cisco StarOS Remote Security Bypass Vulnerability

Cisco StarOS is the United States Cisco Cisco company's set of operating systems running in the 5000 and other series of router equipment. A remote security bypass vulnerability exists in Cisco StarOS, which can be exploited by a remote authenticated attacker to modify arbitrary files. The...

The vulnerability of the Microsoft Server Message Block 1.0 (SMBv1) network protocol on the Windows operating system, which allows a hacker to cause a service failure.

The vulnerability of the Microsoft Server Message Block 1.0 SMBv1 protocol in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted requests remotely...

chromium-browser: out of bounds read in v8

Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

Design/Logic Flaw

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation embedded spaces in the getprocessttyname function resulting in information disclosure and command execution...

The vulnerability of the get_process_ttyname function in the system administration software Sudo may allow attackers to elevate their privileges to superuser status and execute arbitrary code.

The vulnerability of the getprocessttyname function in the Sudo system administration program is related to insufficient input data validation. The vulnerability is exploited by creating a symbolic link to the executable file of Sudo, with the file name formatted in a specific way a space followe...

The vulnerability of the Hyper-V Network Switch component of the Windows operating system allows a hacker to bypass the certification verification.

The vulnerability of the Hyper-V Network Switch component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass certificate verification...

IBM WebSphere Cast Iron Solution Security Bypass Vulnerability

IBM WebSphere Cast Iron Solution is a cloud-based solution from IBM USA. It enables organizations to connect their hybrid public cloud, private cloud and on-premise application environments. A security vulnerability exists in IBM WebSphere Cast Iron Solution that stems from the program failing to...

Sierra Wireless AirLink Raven XE and XT File Download Vulnerability

The Sierra Wireless AirLink Raven XE and XT are both wireless gateway products from Sierra Wireless Canada. An input validation vulnerability exists in Sierra Wireless AirLink Raven, which could be exploited by a remote attacker to submit a special request to download arbitrary system files...

CVE-2017-6611

A vulnerability in the web framework code of Cisco Prime Infrastructure 2.22 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the OpenBSD operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a local attacker to cause a service failure a kernel crash by unmounting the file system and opening vnodes in the mntvnodelist...

The vulnerability of the iOS operating system, which allows a hacker to compromise the security of information.

The vulnerability of the HomeKit operating system’s iOS component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise information security by manipulating the Home Control element within the Control Center...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Hyper-V operating system application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code on the host operating system using a specially created application...

Huawei VCM5010 Command Injection Vulnerability

VCM5010 is a video content management platform from China's Huawei Huawei, an all-in-one video big data analysis device. The Huawei VCM5010 suffers from a command injection vulnerability that can be exploited by an attacker to conduct a command injection attack due to insufficient validation of...

The vulnerability of the Windows operating system, which allows a hacker to bypass the certificate verification process

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to bypass the certificate verification process through a specially created application...

The vulnerability in Microsoft Edge and Internet Explorer browsers allows attackers to bypass certificate verification.

The vulnerability of Microsoft Edge and Internet Explorer exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification by using a specially crafted web page...

The vulnerability of the iOS operating system, which allows a hacker to trigger a service failure

The vulnerability of the Safari component in the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially crafted URL...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Mediaserver component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions device freezing and reboots by using a specially crafte...

PT-2017-1935

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue exists due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. This allows a remote attacker to execute arbitrary code using...

The vulnerability of the Mac OS X operating system, which allows a hacker to trigger a service failure

The vulnerability of the ntfs component in the Mac OS X operating system exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially created application...

Drupal Hotjar Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the Drupal Hotjar module, which stems from the program failing to properly validate user-supplied input. When an unknowing...