Tcpdump BEEP Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.BEEP parser is one of the Block Extensible Exchange Protocol parsers. ...

Tcpdump ISO ES-IS Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.ISO ES-IS parser is one of those end-system to intermediate-system...

Tcpdump PPP parser buffer overflow vulnerability (CNVD-2017-28271)

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.PPP parser is one of the peer-to-peer protocol parsers. A buffer...

DEBIAN-CVE-2017-9461

smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability fdopenatomic infinite loop with high CPU usage and memory consumption due to wrongly handling dangling symlinks...

PT-2017-18850 · Chicken +1 · Chicken Scheme +1

Name of the Vulnerable Software and Affected Versions: CHICKEN Scheme versions prior to 4.13 Description: The issue arises from an incorrect "pair?" check in the Scheme "length" procedure, leading to an unsafe pointer dereference. This allows an attacker to cause a denial of service by passing an...

CVE-2017-7229

PGP/MIME encrypted messages injected into a Vaultive O365 before 4.5.21 frontend via IMAP or SMTP have their Content-Type changed from 'Content-Type: multipart/encrypted; protocol="application/pgp-encrypted"; boundary="abc123abc123"' to 'Content-Type: text/plain' - this results in the encrypted...

UBUNTU-CVE-2017-6458

Multiple buffer overflows in the ctlput functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenticated users to have unspecified impact via a long variable...

CVE-2017-5622

With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts with adbd enabled. Therefore, a malicious charger or a physical attacker can open up, without authorization, an ADB session with the device, in order to further exploit other...

WordPress Core Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A cross-site scripting vulnerability exists in WordPress Core versions prior to 4.7, which allows remote attackers to exploit the...

JFrog Artifactory Arbitrary Code Execution Vulnerability

JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog that supports clustering and high-availability Docker registries and provides an end-to-end automation solution for tracking artifacts from development to production. A security vulnerability exis...

WordPress SSRF Vulnerability

WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress versions prior to 4.5, which stems from the program ignoring oct...

PT-2016-6038 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.5.4 Description: The issue is related to a problem in the Linux kernel where it does not properly traverse a mount propagation tree in a certain case involving a slave mount. This allows local users to cause a...

CVE-2016-2846

Siemens SIMATIC S7-1200 CPU devices before 4.0 allow remote attackers to bypass a "user program block" protection mechanism via unspecified vectors...

Xen Denial of Service Vulnerability (CNVD-2016-01331)

Xen is a virtualization technology developed by the University of Cambridge that can be used in the Linux kernel, allowing multiple operating systems to run simultaneously. A denial of service vulnerability exists in versions prior to Xen 4.6.x, which allows remote attackers to cause a denial of...

Epiphany Healthcare Cardio Server SQL and LDAP Injection Vulnerabilities

Epiphany Healthcare Cardio Server is a scalable ECG management system from Epiphany Healthcare, UK. A security vulnerability exists in Epiphany Healthcare Cardio Server versions prior to 4.0. A local attacker can exploit this vulnerability by inserting an LDAP query into the URL of a login page t...

Fortinet FortiADC D models Cross-Site Scripting Vulnerability

Fortinet FortiADC is an application delivery product from Fortinet that provides high availability, user experience, performance and scalability for mobile users, cloud and enterprise application access. A cross-site scripting vulnerability exists in Fortinet FortiADC D models prior to version 4....

Vulnerability in NetApp OnCommand Balance

NetApp OnCommand Balance is a NetApp solution that provides guidance on how to optimize the performance and capacity of virtual and physical data center infrastructures. A security vulnerability exists in NetApp OnCommand Balance versions prior to 4.2P3. An attacker could exploit the vulnerabilit...

PT-2014-2326 · Plone +1 · Plone +1

Name of the Vulnerable Software and Affected Versions: Plone versions prior to 4.2.3 Plone versions 4.3 before beta 1 Description: The issue allows remote attackers to cause a denial of service, specifically memory consumption, via a large value. This is related to the formatColumns function...

PT-2005-3554 · Openssh +2 · Openssh +2

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 4.0 Description: The issue allows an attacker that has compromised an SSH user's account to more easily generate a list of additional targets that are more likely to have the same password or key. This is because...