CVE-2018-9205

Vulnerability in avataruploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path...

PT-2018-18106

Name of the Vulnerable Software and Affected Versions Philips Alice 6 System versions prior to R8.0.2 Description The issue is related to the lack of proper data encryption, which compromises the guarantees of confidentiality, integrity, and accountability. Recommendations For Philips Alice 6...

OMRON CX-Supervisor SCS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

CVE-2017-15325: Integer Overflow or Wraparound

The Bdat driver of Prague smart phones with software versions earlier than Prague-AL00AC00B211, versions earlier than Prague-AL00BC00B211, versions earlier than Prague-AL00CC00B211, versions earlier than Prague-TL00AC01B211, versions earlier than Prague-TL10AC01B211 has integer overflow...

OMRON CX-Supervisor CDM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OMRON CX-Supervisor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

CVE-2017-0915: Improper Neutralization of Special Elements used in a Command

Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService resulting in remote code execution...

PT-2018-17796

Name of the Vulnerable Software and Affected Versions KeepKey version 4.0.0 Description The issue allows attackers to trigger the display of information that should not be accessible. This is related to text containing characters that the device's font lacks, which can be exploited to reveal...

RHEL 6 : 389-ds-base (RHSA-2018:0515)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0515 advisory. - 389-ds-base: Authentication bypass due to lack of size check in slapictmemcmp function in chmalloc.c CVE-2017-15135 - 389-ds-base: remote...

Design/Logic Flaw

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow execution of commands due to lack of validation of the shell meta characters with the value of 'system.opkg.remove'...

CVE-2018-7237

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow a remote attacker to delete arbitrary system file due to lack of validation of the /login/bin/setparam to the file name with the value of 'system.delete.sdfile'...

Design/Logic Flaw

Huawei DP300 V500R002C00 have a DoS vulnerability due to the lack of validation when the malloc is called. An authenticated local attacker can craft specific XML files to the affected products and parse this file, which result in DoS attacks...

PT-2018-17969

Name of the Vulnerable Software and Affected Versions Pelco Sarix Professional versions prior to 3.29.67 Description A vulnerability exists due to a lack of authentication for the /login/bin/set param endpoint, which could enable SSH service. Recommendations For versions prior to 3.29.67, update ...

PT-2018-17968

Name of the Vulnerable Software and Affected Versions Pelco Sarix Professional versions prior to 3.29.67 Description A vulnerability exists due to the lack of validation of the shell meta characters with the value of system.download.sd file, which could allow arbitrary system file download...

PT-2018-17302

Name of the Vulnerable Software and Affected Versions Samsung Display Solutions App versions prior to 3.02 Description The issue allows man-in-the-middle attackers to spoof B2B content by leveraging the failure to use encryption during information transmission. Recommendations For versions prior ...

PT-2018-17351

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 65.0.3325.146 Opera versions prior to 65.0.3325.146 Description The issue is related to a lack of access control checks in Instrumentation, allowing a remote attacker who has compromised the renderer process to...

PT-2018-6409

Name of the Vulnerable Software and Affected Versions: Huawei Enjoy 5s versions prior to TAG-AL00C92B170 Huawei Y6 Pro versions prior to TIT-L01C576B121 Description: The issue is caused by a lack of parameter validation, leading to an information leak. An attacker can trick a user into installing...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Amazon Music Player 6.1.5.1213. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within t...

CVE-2018-5501

In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of flow control...

CVE-2018-5501: Uncontrolled Resource Consumption

In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of flow control...

Adobe Acrobat Pro DC ImageConversion EMF JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...