CVE-2018-0113

A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute arbitrary shell commands with the privileges of the daemon user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by posting...

Blink Rendering Module False Messages

The vulnerability of Google Chrome’s Blink engine exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to trigger false browser messages using a specially created HTML page...

Multiple Huawei products cross-border read vulnerability (CNVD-2017-34419)

Huawei RP200 and TE series are Huawei's all-in-one desktop and high-definition videoconferencing products for high-end customers. The out-of-bounds read vulnerability exists in several Huawei products, as the devices fail to adequately verify user input. A remote attacker could exploit this...

CVE-2017-12284

A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, which could lead to the disclosure of confidential information. The vulnerability is due to a lack of input- and validation-checking mechanism...

NetScaler SD-WAN Arbitrary Shell Execution

The vulnerability of the control interface component for NetScaler SD-WAN applications exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary shell commands with root privileges, using the CGISESSID cookie file...

libavformat/rtmppkt Heap Buffer Overflow DoS

The vulnerability of the ffamfgetfieldvalue function in the libavformat/rtmppkt.c file of the FFmpeg multimedia library exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failure segmentation fault a...

Sudo get_process_ttyname Command Execution

The vulnerability of the getprocessttyname function in the Sudo system administration program exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely and gain access to sensitive information...

Cisco Unified Communications Manager Cross-Site Scripting Vulnerability (CNVD-2017-02006)

Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A cross-site scripting vulnerability exists i...

CVE-2016-0265

IBM Campaign is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL ...

Apache Struts RCE

The vulnerability of the REST plugin for the Apache Struts software platform exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created expression...

ImageMagick Code Execution

The vulnerability of the EPHEMERAL, HTTPS, MVG, MSL, TEXT, SHOW, WIN, and PLT command-line graphic editors based on ImageMagick exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using metasymbols within a speciall...

squid: multiple issues in ESI processing

Buffer overflow and input validation flaws were found in the way Squid processed ESI responses. If Squid was used as a reverse proxy, or for TLS/HTTPS interception, a remote attacker able to control ESI components on an HTTP server could use these flaws to crash Squid, disclose parts of the stack...

Xen Hypervisor DoS

The vulnerability of Xen hypervisors exists due to insufficient validation of input data. Exploiting this vulnerability can allow a local attacker to cause a service failure abnormal termination of operations...

BIG-IP Service DoS

The vulnerability of BIG-IP Advanced Firewall Manager, BIG-IP Application Acceleration Manager for application delivery, BIG-IP Access Policy Manager for access control and remote authentication, BIG-IP Application Security Manager for application protection, BIG-IP Analytics for infrastructure...

Cisco TelePresence Video Communication Server DoS

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure disabling VoIP services by usi...

SolarWinds Storage Manager Upload Execution

The vulnerability of the ProcessFileUpload.jsp component in the SolarWinds Storage Manager data management software exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to remotely upload and execute arbitrary files...

VMware vCenter Server System Failure

The vulnerability of the Host Heartbeat service for VMware software that manages virtual infrastructure exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown of the service by sending a specially crafted UDP...

Amazon Linux: Security Advisory (ALAS-2011-20)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2015-3448

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 7.0 Description The issue allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR REQ PWNAM request. This is related...

WordPress Plugin Codestyling Localization Has Multiple Input Validation Vulnerabilities

WordPress is the WordPress Software Foundation's set of blogging platform using the PHP language development, the platform supports in PHP and MySQL server set up personal blog site.Codestyling Localization is one of the localization language development translation package plugin. A cross-site...