PT-2018-2210 · Ntp +5 · Ntp +5

Name of the Vulnerable Software and Affected Versions: ntp versions 4.2.8p4 through 4.2.8p10 Description: The issue is related to errors in processing input data in the ntpd implementation of the NTP protocol. Exploitation of this issue can allow a remote attacker to cause a denial of service by...

Fedora 26 : php-phpmyadmin-motranslator / php-phpmyadmin-sql-parser / etc (2018-147d33439c)

From upstream announcement : Security fix: phpMyAdmin 4.7.8 is released Welcome to phpMyAdmin 4.7.8, a security releaes also containing regular maintenance bug fixes. The security fix relates to a self-XSS vulnerability in the central columns feature that is reported as PMASA-2018-1...

PT-2018-4061 · Elinks +2 · Elinks +2

Name of the Vulnerable Software and Affected Versions: ELinks version 0.12 Twibright Links version 2.3 Description: The issue is related to missing SSL certificate validation. Recommendations: For ELinks version 0.12, update to a version that includes proper SSL certificate validation. For...

PT-2018-17140 · Ipswitch · Ipswitch Whatsup Gold

Name of the Vulnerable Software and Affected Versions: Ipswitch WhatsUp Gold versions prior to 2017 Plus SP1 17.1.1 Description: An issue was discovered that allows remote clients to take advantage of a misconfiguration in the TFTP server, potentially enabling attackers to execute arbitrary...

PT-2018-3241

Name of the Vulnerable Software and Affected Versions libcurl versions 7.1 through 7.57.0 Description The issue is related to insufficient protection of registration data in the libcurl library. This could allow a remote attacker to gain unauthorized access to protected information. When libcurl ...

Mavenlink: User uploaded portfolio files can be accessed by any user even after deleted

Reproduction: ========= 1. Login as a user, e.g: user1 2. Create a portfolio by going to https://app.mavenlink.com/users/1234567-user1/worksamples/new note: replace 1234567-user1 with the actual user id/name endpoint. 3. Uploading any file to the new portfolio and click save. On the right side of...

unrar/unrar_fuzzer: NULL

Detailed report: https://oss-fuzz.com/testcase?key=6436091927199744 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: NULL Sanitizer: memory MSAN Recommende...

PT-2025-32250

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 139.0.7258.66 Description A lack of proper validation of untrusted input within the Core component of Google Chrome permitted a remote attacker to manipulate the Omnibox URL bar display through a specially craft...

PT-2017-4213 · Apache +4 · Apache Portable Runtime +4

Name of the Vulnerable Software and Affected Versions: Apache Portable Runtime APR versions 1.6.2 and prior Description: The issue is related to the apr time exp and apr os exp time functions in the Apache Portable Runtime APR. When these functions are invoked with an invalid month field value, o...

Linksys E Series - Multiple Vulnerabilities

Exploit for hardware platform in category web applications ======================================================================= title: Multiple vulnerabilities product: Linksys E series, see "Vulnerable / tested versions" vulnerable version: see "Vulnerable / tested versions" fixed version: no...

PT-2017-2949 · Microsoft · Sharepoint Server +6

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions 2007 through 2016 Microsoft Office Web Apps Server versions 2010 through 2013 Office Online Server SharePoint Enterprise Server 2010 SharePoint Server 2010 Word Viewer Word Automation Services Description: A remote...

PT-2017-2990 · Cisco · Cisco Ios

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software versions 12.2 through 15.6 Description: A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol PN-DCP exists due to improper parsing of ingress PN-DCP Identify Request packets. This could...

PYSEC-2017-147

In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentially vulnerable to arbitrary code execution by an attacker with access to any user account on the loc...

PT-2017-12898

Name of the Vulnerable Software and Affected Versions tcpdump versions prior to 4.9.2 Description The issue is related to a buffer over-read in the LLDP parser, specifically in the lldp private 8023 print function within the print-lldp.c file. Recommendations For versions prior to 4.9.2, update t...

KLA11094 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause a denial of service. Below is a complete list of vulnerabilities: 1. Buffer overflow vulnerability in the IrCOMM dissector can be exploited remotely via a specially designed...

General Motors and Shanghai OnStar (SOS) iOS Client

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: General Motors GM, Shanghai OnStar SOS Equipment: SOS iOS Client Vulnerabilities: Cleartext Storage of Sensitive Information, Man-in-the-Middle, Improper Authentication REPOSTED INFORMATION This advisory was originall...

[SECURITY] [DLA ] xchat security update

Package : xchat Version : 2.8.8-7.1+deb7u1 CVE ID : CVE-2016-2087 Debian Bug : 852275 It was discovered that there was a directory traversal vulnerability in the xchat IRC client which allowed remote IRC servers to read or modify arbitrary files via a ".." in the server name. For Debian 7 "Wheezy...

PT-2017-18385 · Microsoft · Sql Server Analysis Services +1

Name of the Vulnerable Software and Affected Versions: Microsoft SQL Server Analysis Services versions 2012 through 2016 Description: An information disclosure issue exists due to improper permission enforcement. If an attacker's credentials allow access to an affected SQL server database, they...

PT-2018-1896 · Openssh +5 · Openssh +5

Name of the Vulnerable Software and Affected Versions: OpenSSH versions prior to 7.4 Description: The issue is related to a denial of service caused by a NULL pointer dereference and daemon crash in OpenSSH. This can be triggered by remote attackers via an out-of-sequence NEWKEYS message, as...

PT-2017-11428 · D Link · Dir-600M

Name of the Vulnerable Software and Affected Versions: D-Link DIR-600M versions prior to C1 v3.05ENB01 beta 20170306 Description: A security issue was discovered in the form2userconfig.cgi endpoint, specifically in the username parameter, which is vulnerable to cross-site scripting XSS. This allo...