PT-2017-12473

Name of the Vulnerable Software and Affected Versions Cisco WebEx Meeting Center affected versions not specified Description A vulnerability could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of an affected system. The issue is due to...

PT-2017-3931

Name of the Vulnerable Software and Affected Versions Huawei USG6330 affected versions not specified Description The issue is related to insufficient input validation during the authentication process in the network packet analysis tool of the Huawei USG6330 firewall. This can be exploited by a...

PT-2017-3580

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 8.1 Description: The issue is related to the incorrect use of mmco parameters in the Android media framework libavc, which is part of the Media Framework component of the Android operating system. This is due to...

CVE-2017-12257

A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters...

PT-2017-3848

Name of the Vulnerable Software and Affected Versions sssd versions prior to 1.16.0 Description The issue is related to insufficient input validation in the sysdb search user by upn res function of the sssd service, which manages access to remote directories and authentication mechanisms. This fl...

CVE-2017-14771

Skybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload vulnerability due to insufficient input validation of user-supplied files path when uploading files via the application. During a debugger-pause state, a local authenticated attacker can upload an arbitrary fi...

CVE-2017-14771

Skybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload vulnerability due to insufficient input validation of user-supplied files path when uploading files via the application. During a debugger-pause state, a local authenticated attacker can upload an arbitrary fi...

PT-2017-13684

Name of the Vulnerable Software and Affected Versions Skybox Manager Client Application versions prior to 8.5.501 Description The issue is related to insufficient input validation of user-supplied file paths when uploading files via the application. This can be exploited by a local authenticated...

PT-2017-3553

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center iMC PLAT version 7.3 E0506 Description: A Remote Code Execution issue exists due to insufficient input validation in the dbman.exe executable of the HPE Intelligent Management Center PLAT platform. This allow...

Cisco IOS XE Wireless Controller Manager Denial of Service Vulnerability

A vulnerability in the wireless controller manager of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a restart of the switch and result in a denial of service DoS condition. The vulnerability is due to insufficient input validation. An attacker could exploit this...

PT-2017-3073

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13 file versions prior to 5.30 Description The issue involves insufficient input validation in the "file" product, which can be exploited by remote attackers to cause a denial of service, potentially leading to an...

PT-2017-3069

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13 file versions prior to 5.30 Description The issue involves insufficient input validation in the "file" product, which can be exploited by remote attackers to cause a denial of service, potentially leading to an...

Cross site scripting

A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation...

PT-2017-2986

Name of the Vulnerable Software and Affected Versions Cisco UCS Central Software affected versions not specified Description The issue is related to insufficient input validation of commands entered in the CLI, which could allow an authenticated, local attacker to gain shell access by entering a...

Cross site scripting

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...

CVE-2017-12212

A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of certain...

PT-2017-12402

Name of the Vulnerable Software and Affected Versions Cisco Unity Connection version 10.52 Description A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web...

The vulnerability of the Linux kernel in the Android operating system, originating from the CAF repository, allows a hacker to cause incorrect control over the data transfer stream.

The vulnerability of the Linux operating system Android’s kernel from the CAF repository is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to improperly control the data transfer process by disabling the validation mechanisms...

CVE-2017-12706: Stack-based Buffer Overflow

A stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8.220170817. Researchers have identified multiple vulnerabilities where there is a lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could...

PT-2017-3939

Name of the Vulnerable Software and Affected Versions Progress Telerik UI for ASP.NET AJAX versions prior to R2 2017 SP2 Description The issue is related to insufficient input validation in the RadAsyncUpload component, allowing remote attackers to perform arbitrary file uploads or execute...