CVE-2017-12466

CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to sslhalen when running ccn-lite-sim, which trigger an out-of-bounds access...

CVE-2017-12463

CVE-2017-12463 concerns CCN-lite prior to 2.0.0, where a memory leak in the function ccnl_app_RX (ccnl-uapi.c) can be triggered via an envelope_s pointer when the packet format is unknown. This leads to a denial of service through memory consumption. Documents consistently identify the affected s...

CVE-2017-12470

Integer overflow in the ndnparsesequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

Type confusion

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-6480

CVE-2018-6480 describes a type confusion in CCN-lite 2. The bug occurs in ccnl_fwd_handleInterest, which assumes the union member s is of type ccnl_pktdetail_ndntlv_s; if the actual type is ccnl_pktdetail_ccntlv_s or ccnl_pktdetail_iottlv_s, the code may access uninitialized memory or data that i...

CVE-2018-6480

A type confusion issue was discovered in CCN-lite 2, leading to a memory access violation and a failure of the nonce feature which, for example, helped with loop prevention. ccnlfwdhandleInterest assumes that the union member s is of type ccnlpktdetailndntlvs. However, if the type is in fact stru...

CVE-2018-5749

install.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers List before 2.0.4 does not sanitize input before saving database connection information in connect.php, which might allow remote attackers to execute arbitrary PHP code via the 1 databaseserver, 2...

Code injection

install.php in Minecraft Servers List Lite before commit c1cd164 and Premium Minecraft Servers List before 2.0.4 does not sanitize input before saving database connection information in connect.php, which might allow remote attackers to execute arbitrary PHP code via the 1 databaseserver, 2...

WordPress Dbox 3D Slider Lite Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Dbox 3D Slider Lite plugin is used in one of the 3D slider to add plug-ins. A SQL injection vulnerability exists i...

CVE-2018-5374

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

Sql injection

The Dbox 3D Slider Lite plugin through 1.2.2 for WordPress has SQL Injection via settings\sliders.php currentsliderid parameter...

CVE-2018-5374

CVE-2018-5374 affects WordPress Dbox 3D Slider Lite plugin (

Dbox 3D Slider Lite <= 1.2.2 - Multiple Authenticated SQL injection

During the security analysis, ThunderScan discovered SQL injection vulnerabilities in Dbox 3D Slider Lite WordPress plugin. The easiest way to reproduce the vulnerabilities is to modify the POST request for the slider rename or reorder and append parts of the SQL query to the currentsliderid...

CVE-2017-17800

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17798...

CVE-2017-17798

In TG Soft Vir.IT eXplorer Lite 8.5.42, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17800...

CVE-2017-17799

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x82730068...

CVE-2017-17800

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273A0A0, a different vulnerability than CVE-2017-17798...

CVE-2017-17802

In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file VIRAGTLT.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x8273E080...