PT-2017-3961

Name of the Vulnerable Software and Affected Versions GNU C Library glibc versions 2.31 and earlier Description The issue is related to the iconv program in the GNU C Library. When invoked with multiple suffixes in the destination encoding along with the -c option, it enters an infinite loop when...

PT-2017-1141

Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Java SE Embedded version 8u111 JRockit version R28.3.12 Description The issue exists due to insufficient input validation in the Java SE, Java SE Embedded, and JRockit components. It can be exploited by...

PT-2017-1140

Name of the Vulnerable Software and Affected Versions Java SE versions 6u131, 7u121, and 8u112 Java SE Embedded version 8u111 JRockit version R28.3.12 Description The issue is related to insufficient input validation in the 2D component of the Java Platform. It allows an unauthenticated attacker...

PT-2017-1139

Name of the Vulnerable Software and Affected Versions MySQL Server versions 5.7.16 and earlier Description The issue is related to insufficient input validation in the Server: Replication component of MySQL. It allows an attacker with network access via multiple protocols to compromise the MySQL...

WordPress plugin wowpth suffers from a reflective cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A reflective cross-site scripting vulnerability exists in the page parameter of the wordpress plugin wowpth 'createAdvancedTheme.php', which can be exploited by...

PT-2017-3539

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center PLAT version 7.3 E0504P04 Description: The issue is related to insufficient input validation in the dbman service of the HPE Intelligent Management Center PLAT platform. This can be exploited by a remote...

PT-2016-3151

Name of the Vulnerable Software and Affected Versions Apache HTTP Server versions 2.4.0 through 2.4.23 Description The issue is caused by insufficient input validation in the mod auth digest module of the Apache HTTP Server. This can be exploited by a remote attacker to cause the server to crash...

WordPress Image Gallery plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation of a set of PHP language development of the blog platform , the platform supports PHP and MySQL server set up a personal blog site . Image Gallery is one of the image processing plug-ins . A cross-site scripting vulnerability exists in WordPress Imag...

PT-2016-3026

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 55.0.2883.75 for Mac, Windows and Linux Google Chrome version prior to 55.0.2883.84 for Android Description The issue arises from the extensions API in Google Chrome incorrectly handling navigation within PDFs...

PT-2016-2968 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is due to insufficient input validation in Microsoft Edge, allowing a remote attacker to potentially tamper with web page content using a specially crafted website...

Multiple Cross-Site Scripting Vulnerabilities in Phire CMS

Phire CMS is an open source content management system and publishing platform for websites or WEB applications. Phire CMS 2.0.0 and prior versions have multiple cross-site scripting vulnerabilities that stem from the program failing to adequately filter user-submitted input. An attacker can explo...

PT-2016-3153

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 53.0.2785.143 Opera affected versions not specified Description The issue is related to multiple unspecified vulnerabilities in Google Chrome, which exist due to insufficient input validation. These...

PT-2016-6884

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.61T1 and later Cisco IOS XE affected versions not specified Description The issue allows remote authenticated users to read arbitrary files due to insufficient input validation by the affected framework. An attacker could...

Cisco IOS Software Data in Motion Denial of Service Vulnerability (cisco-sa-20160914-ios-xe)

A vulnerability in the Data in Motion DMo application in Cisco IOS software with the IOx feature set could allow an unauthenticated, remote attacker to cause a denial of service DoS condition in the DMo process. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Bluetooth component in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges by connecting devices via Bluetooth while the main user is working...

TYPO3 Form Component Arbitrary File Disclosure Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. An arbitrary file disclosure vulnerability exists in the TYPO3 Form component. An attacker could exploit this vulnerability to obtain sensitive information because the program...

Drupal Outline Designer Cross-Site Scripting Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Outline Designer is one of the user experience modules for library management. A cross-site scripting vulnerability exists in Drupal Outline Designer versions 7.x-2.x prior to 7.x-2.3,...

PT-2016-4804

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 6.x through 6.0.1 Description The issue allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access. This is due to insufficient input validation, which could be...

PT-2016-2455

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.4 Android versions 5.0.x through 5.0.2 Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-07-01 Description The issue exists due to insufficient input validation in the...

PT-2016-2320

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions prior to 3.1.1 Description The administrative web interface in Cisco Prime Infrastructure has a weakness due to insufficient input validation, allowing remote authenticated users to execute arbitrary command...