CVE-2017-0681

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37208566...

CVE-2017-0670

A denial of service vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36104177...

CVE-2017-0672

A denial of service vulnerability in the Android libraries. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-34778578...

CVE-2017-0675

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34779227...

UBUNTU-CVE-2017-0691

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36724453...

CVE-2017-8491

creationtimestamp| type| source ---|---|--- 2017-06-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42215...

CVE-2015-5381

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter to the default URI...

UBUNTU-CVE-2017-0592

A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution...

CVE-2017-7283

An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...

UBUNTU-CVE-2017-6441

The zvalgetlongfuncex in Zend/zendoperators.c in PHP 7.1.2 allows attackers to cause a denial of service NULL pointer dereference and application crash via crafted use of "declareticks=" in a PHP script. NOTE: the vendor disputes the classification of this as a vulnerability, stating "Please do n...

PT-2017-17068 · Php +1 · Php +1

Name of the Vulnerable Software and Affected Versions: PHP version 7.1.2 Description: The issue in the zval get long func ex function in Zend/zend operators.c allows attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via crafted use of...

CVE-2017-3866

A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against the user of the web interface of the affected system. More Information: CSCvc79842 CSCvc79846 CSCvc79855 CSCvc79873...

CVE-2017-3830

A vulnerability in an internal API of the Cisco Meeting Server CMS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on the affected appliance. More Information: CSCvc89678. Known Affected Releases: 2.1. Known Fixed Releases: 2.1.2...

EMC RSA Web Threat Detection Cross-Site Scripting Vulnerability

EMC RSA Web Threat Detection is a suite of Web threat detection software from EMC Corporation. The software is used to collect and analyze real-time data from web traffic to provide intelligent real-time analysis of web sessions and user behavior. A cross-site scripting vulnerability exists in EM...

CVE-2017-3412

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2017-00994)

Oracle E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation.Oracle Leads Management is one of the components that provides solutions to automate and optimize an organization's sales prospecting. A remote vulnerability exists in the Oracle Lea...

VX Search Enterprise Buffer Overflow Vulnerability

VX Search Enterprise is a utility software that can search your computer files. A buffer overflow vulnerability exists in VX Search Enterprise version 9.1.12, which can be exploited by an attacker to execute arbitrary code in the context of an affected application, potentially resulting in a deni...

IBM BigFix Remote Controll Local Information Disclosure Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A local attacker could exploit the vulnerability to discover hard-coded credentials...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11868)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions, which stems from the program failing to properly set account lockout. A remote attacker can exploit this vulnerabili...

IBM BigFix Remote Control Encryption Issue Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions, which stems from the program's use of weak encryption. The vulnerability can be exploited by an attacker to compromi...