The vulnerability of the Windows operating system, which allows a hacker to bypass the certificate verification process

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to bypass the certificate verification process through a specially created application...

The vulnerability in Microsoft Edge and Internet Explorer browsers allows attackers to bypass certificate verification.

The vulnerability of Microsoft Edge and Internet Explorer exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification by using a specially crafted web page...

The vulnerability of the iOS operating system, which allows a hacker to trigger a service failure

The vulnerability of the Safari component in the iOS operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially crafted URL...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Mediaserver component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions device freezing and reboots by using a specially crafte...

PT-2017-1935

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue exists due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. This allows a remote attacker to execute arbitrary code using...

The vulnerability of the Mac OS X operating system, which allows a hacker to trigger a service failure

The vulnerability of the ntfs component in the Mac OS X operating system exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially created application...

Drupal Hotjar Module Cross-Site Scripting Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in the Drupal Hotjar module, which stems from the program failing to properly validate user-supplied input. When an unknowing...

Phalcon Eye Arbitrary Code Execution Vulnerability

Phalcon is an extension implemented in C. Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tools provide features such as service provisioning, configuration management, and reporting status. An arbitrary code execution vulnerability exists in Phalcon Ey...

Ionize Arbitrary Code Execution Vulnerability

ionize is a CMS system developed using CodeIgniter. A cross-site scripting vulnerability exists in Ionize version 1.0.8 due to the program failing to adequately validate user-supplied input. An attacker can exploit this vulnerability to execute arbitrary HTML and script code in a user's browser...

Vulnerability of the Java Platform software platform, which allows a perpetrator to trigger a service failure

The vulnerability of the 2D software platform of Java exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...

D-Link DWR-932B SHELL Command Execution Vulnerability

The D-Link DWR-932B is a popular router device. An input validation vulnerability exists in the D-Link DWR-932B, which allows remote attackers to exploit the vulnerability to submit a special request to execute the command "/sbin/telnetd -l /bin/sh"...

The vulnerability of Google Chrome browser allows a perpetrator to replace the content of the Omnibox component.

The vulnerability of the Google Chrome browser’s API extension exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to replace the content of the Omnibox component remotely...

The vulnerability of the Android operating system, which allows a intruder to gain unauthorized access to the supervisor’s memory

The vulnerability of the Android operating system’s supervisor exists due to insufficient checking of input data. Exploiting this vulnerability can allow an intruder, operating locally, to gain unauthorized access to the supervisor’s memory using HLOS...

CVE-2016-7882

Adobe Experience Manager versions 6.2 and earlier have an input validation issue in the WCMDebug filter that could be used in cross-site scripting attacks...

mysql: Incorrect input validation allowing code execution via mysqldump

It was discovered that the mysql and mysqldump tools did not correctly handle database and table names containing newline characters. A database user with privileges to create databases or tables could cause the mysql command to execute arbitrary shell or SQL commands while restoring database...

3: Pulling of any image is possible with it manifest

An input validation flaw was found in the way OpenShift handles requests for images. A user, with a copy of the manifest associated with an image, can pull an image even if they do not have access to the image normally, resulting in the disclosure of any information contained within the image...

Barco ClickShare Arbitrary File Disclosure Vulnerability

ClickShare is Barco's wireless presentation collaboration system that allows all participants to share content on a centralized conference room screen. An arbitrary file disclosure vulnerability exists in Barco ClickShare because it does not adequately validate user-supplied input. An attacker...

OIC Exponent CMS Information Disclosure Vulnerability

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. An information disclosure...

Amazon Linux: Security Advisory (ALAS-2016-731)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Command Injection Vulnerability in AVTECH DVRs

AVTECH, founded in 1996, is one of the world's leading CCTV manufacturers. The main products are surveillance equipment, network cameras, network video recorders and so on. A command injection vulnerability exists in AVTECH DVR. Because the interface query function does not filter and validate th...