PT-2017-16412

Name of the Vulnerable Software and Affected Versions Eview EV-07S GPS Tracker affected versions not specified Description The issue arises from a lack of authentication, allowing an unauthenticated user who knows the device's phone number to send an SMS command, "RESET!", and revert the device t...

PT-2017-1609

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.2.4 Build 20170313 Description The issue is related to the lack of input data sanitization in the QTS operating system. This allows a remote attacker to execute arbitrary commands and gain administrator privileges...

CVE-2017-5985

lxc-user-nic in Linux Containers LXC allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check...

CVE-2017-5985

lxc-user-nic in Linux Containers LXC allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check...

CVE-2017-5985: Missing Authorization

lxc-user-nic in Linux Containers LXC allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by leveraging lack of netns ownership check...

CVE-2017-6466: Improper Input Validation

F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...

Trend Micro Deep Discovery Email Inspector write_new_html_with_svg Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Deep Discovery Email Inspector. Authentication is not required to exploit this vulnerability. The specific flaw exists within writenewhtmlwithsvg.php. The issue results from the lack of...

Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Vulnerability of the Java Platform software platform, which allows a perpetrator to gain access to data for reading purposes

The vulnerability of the Java Platform software platform’s Deployment component is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain read access to data through network packets...

Trend Micro Control Manager dlp_policy Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetold's dlppolicy.php script. The issue lies in the lack of proper...

The vulnerability of the Android operating system, which allows a hacker to gain access to data

The vulnerability in the NVIDIA Android operating system’s video driver is related to the lack of protection for service data. Exploiting this vulnerability allows a local attacker to gain access to local malicious applications to data that they do not have permission to access. This issue is...

CVE-2016-3016

IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an authenticated attacker to load malicious code...

PT-2017-8900

Name of the Vulnerable Software and Affected Versions IBM Tivoli Key Lifecycle Manager versions 2.5 through 2.6 Description The issue allows anonymous users to access protected areas due to a lack of authentication check for a critical resource or functionality. Recommendations For versions 2.5 a...

PT-2017-3142

Name of the Vulnerable Software and Affected Versions BINOM3 Universal Multifunctional Electric Power Quality Meter affected versions not specified Description The issue is related to the lack of authentication for remote services in the BINOM3 Universal Multifunctional Electric Power Quality...

PT-2017-1147

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions 11.3 Description The issue is related to a lack of access control in the kernel of the Oracle Sun operating system. It allows an unauthenticated attacker with network access via multiple protocols to...

macOS 10.12.1 / iOS Kernel - host_self_trap Use-After-Free Exploit

Exploit for multiple platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1034 The task struct has a lock itklockdata, taken via the itklock macros which is supposed to protect the task-itk ports. The hostselftrap mach trap accesses task-itkhost witho...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of Qualcomm’s Android operating system’s media codecs is related to lack of access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2016-9385

The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service host crash by leveraging lack of canonical address checks...

PT-2017-1177

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a lack of access control in the Broadcom Wi-Fi driver of the Android operating system. It allows a remote attacker to execute arbitrary code. This is an elevation of...

Adobe Reader DC XSLT output Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within XSLT's...