CVE-2017-12864

In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

Zabbix 3.2.x < 3.2.7 Multiple Vulnerabilities

According to its self-reported version number, the instance of Zabbix running on the remote host is 3.2.x prior to 3.2.7. It is, therefore, affected by multiple vulnerabilities : - A flaw exists that allows a reflected cross-site scripting XSS attack. This flaw exists because the actionconf.php...

CVE-2017-9659

A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

Apache Subversion Remote Code Execution Vulnerability

Subversion is an open source multi-user version control system that supports non-ASCII text and binary data. A security vulnerability in the Subversion client's handling of svn+ssh:// URLs allows remote attackers to exploit the vulnerability to construct malicious requests that can execute...

McAfee SaaS Remote Command Execution

A Remote Command Execution exists in McAfee Security-as-a-Service SaaS. The vulnerability is due to a fail in parameter check. Successful exploitation may cause a remote code execution...

CVE-2015-3616

Fortinet FortiManager is affected by CVE-2015-3616 due to a SQL injection in FortiManager 5.0.x before 5.0.11 and 5.2.x before 5.2.2. A remote attacker can exploit unspecified parameters to execute arbitrary commands. Impact: potential remote code execution with high severity. Affected components...

logback: Serialization vulnerability in SocketServer and ServerSocketReceiver

It was found that logback is vulnerable to a deserialization issue. Logback can be configured to allow remote logging through SocketServer/ServerSocketReceiver interfaces that can accept untrusted serialized data. Authenticated attackers on the adjacent network can leverage this vulnerability to...

Android Media framework h263 decoder remote code execution vulnerability (CNVD-2017-23435)

Android is a set of Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. media framework h263 decoder is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in Media framework h263 decoder in Androi...

Android Media framework libavc remote code execution vulnerability (CNVD-2017-23413)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework libavc is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in Media framework libavc in Android. A remote attacke...

CVE-2017-0713

A remote code execution vulnerability in the Android libraries sfntly. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-32096780...

CVE-2017-0719

A remote code execution vulnerability in the Android media framework mpeg2 decoder. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273673...

Microsoft Windows PDF Library Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft USA.PDF library is one of the PDF libraries. A remote code execution vulnerability exists in PDF Library in Microsoft Windows, which stems from the program failing to properly handle objects in memory. A remote attacker can...

Microsoft Windows Edge JavaScript Engine Remote Code Execution Vulnerability (CNVD-2017-23797)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers and the latter is a set of server operating systems.Edge is one of the default browsers that comes with the system.JavaScript engines i...

CVE-2017-10115

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JCE. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with networ...

CVE-2015-7849

Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service crash via crafted packets...

CVE-2017-6756

The CVE-2017-6756 entry describes a CSRF vulnerability in the Web UI Application of Cisco Prime Collaboration Provisioning Tool (PCPT) up to version 12.2. An unauthenticated, remote attacker could induce a user’s browser to perform actions authorized for that user, enabling partial impact to conf...

(0Day) Advantech WebAccess TpMegaJVT CreateStream Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within TpMegaJVT.oc...

(0Day) Advantech WebAccess nvA1Media Connect MediaURL Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within nvA1Media.oc...

SLiMS SQL Injection Vulnerability

SLiMS 8 Akasia is an open source, free library management system. An SQL injection vulnerability exists in the admin/AJAXlookuphandler.php file, the admin/AJAXcheckid.php file, and the admin/AJAXvocabolarycontrol.php file in SLiMS 8 Akasia 8.3.1 and earlier versions. A remote attacker can exploit...

(0Day) Advantech WebAccess nvA1Media Connect MediaURL Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Advantech WebAccess. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within nvA1Media.oc...