CVE-2012-6697

InspIRCd before 2.0.7 allows remote attackers to cause a denial of service infinite loop...

CVE-2012-6697

InspIRCd before 2.0.7 allows remote attackers to cause a denial of service infinite loop...

PT-2017-2008

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to insufficient input validation in the Hyper-V Network Switch component of the Windows operating system. This allows an attacker to bypass certificate validation. Remote...

PT-2017-2009

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to insufficient input validation in the Hyper-V Network Switch component of the Windows operating system. This allows an attacker to bypass certificate validation. Remote...

PT-2017-1660

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.3 Description The issue is related to insufficient input validation in the HomeKit component of the iOS operating system. This could allow a remote attacker to impact the security of information by manipulating the Hom...

Cisco Application-Hosting Framework Directory Traversal Vulnerability

A vulnerability in the web framework code of the Cisco application-hosting framework CAF component of the Cisco IOx application environment could allow an unauthenticated, remote attacker to read any file from the CAF in the virtual instance running on the affected device. SPDX-FileCopyrightText:...

Cisco Application-Hosting Framework Arbitrary File Creation Vulnerability

A vulnerability in the Cisco application-hosting framework CAF component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance running on the affected device. SPDX-FileCopyrightText: 2017 Greenbone AG Some...

CVE-2017-3852

A vulnerability in the Cisco application-hosting framework CAF component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance running on the affected device. The vulnerability is due to insufficient input...

CVE-2017-3858

A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation of HTTP parameters supplied by the user. An attacker could...

PT-2017-16146

Name of the Vulnerable Software and Affected Versions Cisco IOx versions 1.0.0.0 through 1.1.0.0 Description A vulnerability in the Cisco application-hosting framework component could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance running on the...

PT-2017-1621

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to insufficient input validation in the Hyper-V virtualization system of the Windows operating system. An attacker could exploit this to cause a denial of service...

PT-2017-16142

Name of the Vulnerable Software and Affected Versions Cisco Workload Automation Client Manager Server versions 6.3.0.116 and later Cisco Tidal Enterprise Scheduler Client Manager Server versions 6.2.1.435 and later Description The issue is caused by insufficient input validation, allowing an...

PT-2017-1622

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description The issue is related to insufficient input validation in the Hyper-V virtualization system of the Windows operating system. It can be exploited by an attacker using a specially crafte...

PT-2017-1655

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold, 1511, 1607 Microsoft Windows Server 2016 Description The issue allows remote attackers to modify PowerShell script without invalidating associated signatures. It exists due to insufficient input validation,...

PT-2017-1465

Name of the Vulnerable Software and Affected Versions Microsoft Edge versions affected versions not specified Microsoft Internet Explorer versions affected versions not specified Description The issue exists due to insufficient input validation in Microsoft browsers, allowing a remote attacker to...

PT-2017-1939

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue exists due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. It allows a remote attacker to execute arbitrary code using...

PT-2017-4211

Name of the Vulnerable Software and Affected Versions PostGIS versions 2.x through 2.3.2 Description The issue is related to the ST AsX3D function in PostGIS, which is used with PostgreSQL. It allows remote attackers to cause a denial of service via crafted input, as demonstrated by an abnormal...

PT-2017-3961

Name of the Vulnerable Software and Affected Versions GNU C Library glibc versions 2.31 and earlier Description The issue is related to the iconv program in the GNU C Library. When invoked with multiple suffixes in the destination encoding along with the -c option, it enters an infinite loop when...

PT-2017-1140

Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Java SE Embedded version 8u111 JRockit version R28.3.12 Description The issue is related to insufficient input validation in the 2D component of the Java Platform. It allows an unauthenticated attacker...

PT-2017-1141

Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Java SE Embedded version 8u111 JRockit version R28.3.12 Description The issue exists due to insufficient input validation in the Java SE, Java SE Embedded, and JRockit components. It can be exploited by...