IBM WebSphere Application Server 7.0.0.x < 7.0.0.43 / 8.0.0.x < 8.0.0.14 / 8.5.x < 8.5.5.12 / 9.0.0.x < 9.0.0.4 SOAP Connectors DoS

The IBM WebSphere Application Server running on the remote host is version 7.0.0.x prior to 7.0.0.43, 8.0.0.x prior to 8.0.0.14, 8.5.x prior to 8.5.5.12, or 9.0.0.x prior to 9.0.0.4. It is, therefore, affected by an input validation flaw in SOAP connectors that allows a remote user to cause...

Multiple Lenovo Products BIOS SMI Handler Bypass System Protection Vulnerability

The Lenovo IdeaCentre 300-20ISH and others are products of Lenovo, a Chinese company.The Lenovo IdeaCentre 300-20ISH is a desktop computer; the ThinkServer RD540 is a server device.The BIOS SMI Handler is one of the management Information Architecture Handler program. A security vulnerability...

Huawei Mobile Product Input Validation Vulnerability

The Huawei Vicky-AL00A/Victoria-AL00A/Warsaw-AL00 is a smartphone from the Chinese company Huawei Huawei. An input validation vulnerability exists in the Bastet of the Huawei Vicky-AL00A/Victoria-AL00A/Warsaw-AL00 phones due to a lack of parameter checking. An attacker can trick the user into...

CVE-2017-11385

SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in cmdHandlerStatusMonitor.dll. Formerly ZDI-CAN-4545...

The vulnerability of the Xen hypervisor, a platform for server virtualization called XenServer, allows a attacker to cause a service failure, obtain confidential information, or execute arbitrary code.

The vulnerability of the Xen hypervisor and the XenServer platform for server virtualization exists due to insufficient validation of input data. Exploiting this vulnerability can allow a guest user of the 86-bit operating system running locally to obtain confidential information, execute arbitra...

ansible: Arbitrary code execution on control node (incomplete fix for CVE-2016-9587)

An input validation vulnerability was found in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the Ansible server...

The vulnerability of the `tcp_v6_syn_recv_sock` function in the `net/ipv6/tcp_ipv6.c` file of the Linux operating system’s kernel allows a attacker to cause a service failure or exert other effects.

The vulnerability of the tcpv6synrecvsock function in the net/ipv6/tcpipv6.c module of the Linux operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects as a result of system calls...

Cisco StarOS Remote Security Bypass Vulnerability

Cisco StarOS is the United States Cisco Cisco company's set of operating systems running in the 5000 and other series of router equipment. A remote security bypass vulnerability exists in Cisco StarOS, which can be exploited by a remote authenticated attacker to modify arbitrary files. The...

The vulnerability of the Microsoft Server Message Block 1.0 (SMBv1) network protocol on the Windows operating system, which allows a hacker to cause a service failure.

The vulnerability of the Microsoft Server Message Block 1.0 SMBv1 protocol in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted requests remotely...

chromium-browser: out of bounds read in v8

Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

Design/Logic Flaw

Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation embedded spaces in the getprocessttyname function resulting in information disclosure and command execution...

The vulnerability of the get_process_ttyname function in the system administration software Sudo may allow attackers to elevate their privileges to superuser status and execute arbitrary code.

The vulnerability of the getprocessttyname function in the Sudo system administration program is related to insufficient input data validation. The vulnerability is exploited by creating a symbolic link to the executable file of Sudo, with the file name formatted in a specific way a space followe...

The vulnerability of the Hyper-V Network Switch component of the Windows operating system allows a hacker to bypass the certification verification.

The vulnerability of the Hyper-V Network Switch component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass certificate verification...

IBM WebSphere Cast Iron Solution Security Bypass Vulnerability

IBM WebSphere Cast Iron Solution is a cloud-based solution from IBM USA. It enables organizations to connect their hybrid public cloud, private cloud and on-premise application environments. A security vulnerability exists in IBM WebSphere Cast Iron Solution that stems from the program failing to...

Sierra Wireless AirLink Raven XE and XT File Download Vulnerability

The Sierra Wireless AirLink Raven XE and XT are both wireless gateway products from Sierra Wireless Canada. An input validation vulnerability exists in Sierra Wireless AirLink Raven, which could be exploited by a remote attacker to submit a special request to download arbitrary system files...

CVE-2017-6611

A vulnerability in the web framework code of Cisco Prime Infrastructure 2.22 could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of some...

The vulnerability of the OpenBSD operating system, which allows a hacker to trigger a service failure

The vulnerability of the OpenBSD operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a local attacker to cause a service failure a kernel crash by unmounting the file system and opening vnodes in the mntvnodelist...

The vulnerability of the iOS operating system, which allows a hacker to compromise the security of information.

The vulnerability of the HomeKit operating system’s iOS component exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise information security by manipulating the Home Control element within the Control Center...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Hyper-V operating system application exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code on the host operating system using a specially created application...

Huawei VCM5010 Command Injection Vulnerability

VCM5010 is a video content management platform from China's Huawei Huawei, an all-in-one video big data analysis device. The Huawei VCM5010 suffers from a command injection vulnerability that can be exploited by an attacker to conduct a command injection attack due to insufficient validation of...