CVE-2017-7728

On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands e.g., setting the alarm on/off, related to incorrect cryptography...

CVE-2017-7728

The CVE-2017-7728 entry concerns iSmartAlarm cube devices, where an Authentication Bypass allows remote execution of alarm controls. The connected material confirms: (a) vulnerability type is Authentication Bypass leading to remote command execution (e.g., Arm/Disarm, Siren control); (b) root cau...

[ASA-201707-10] flashplugin: multiple issues

Arch Linux Security Advisory ASA-201707-10 ========================================== Severity: Critical Date : 2017-07-11 CVE-ID : CVE-2017-3080 CVE-2017-3099 CVE-2017-3100 Package : flashplugin Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-344 Summary ======= The...

Fuji Electric V-Server

CVSS v3 7.3 ATTENTION: Remotely exploitable Vendor: Fuji Electric Equipment: V-Server Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer AFFECTED PRODUCTS The following versions of V-Server, a data collection and management service, are affected: V-Server Versi...

EMC Data Protection SQL Injection Vulnerability

EMC Data Protection Advisor is a data protection management solution from EMC Corporation. The solution supports automated and centralized execution of all such data collection and analysis, as well as obtaining a single comprehensive view of the data protection environment and activities. A SQL...

CVE-2017-10968

In FineCMS through 2017-07-07, application\core\controller\template.php allows remote PHP code execution by placing the code after "?php" in a route=template request...

CVE-2017-10968

In FineCMS through 2017-07-07, application\core\controller\template.php allows remote PHP code execution by placing the code after "?php" in a route=template request...

Remote Code Execution (RCE)

Moodle is vulnerable to remote code execution. A malicious user can update the spellchecking mechanism to point to a arbitrary command, executing the command when a spellchecking request occurs. Note: The Moodle developers are not going to fix this vulnerability...

Google Android System UI Remote Code Execution Vulnerability (CNVD-2017-21552)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA for short. System UI is the system interface that comes with Android. A remote code execution vulnerability exists in System UI in Google Android versions 7.1.1 and 7.1.2. A remote...

Google Android System UI Remote Code Execution Vulnerability (CNVD-2017-21550)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA for short. System UI is the system interface that comes with Android. A remote code execution vulnerability exists in System UI in Google Android versions 7.1.1 and 7.1.2. A remote...

CVE-2017-0682

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36588422...

Remote code execution

A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36588422...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-14632)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-14628)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...

The vulnerability in the implementation of the operating system NetBSD’s stack protection mechanism allows a hacker to execute arbitrary code.

The vulnerability of the Linux kernel’s stack protection mechanism is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using specially crafted binary files with setuid attributes as,usr,bin,at...

CVE-2017-9925

In SWFTools 2013-04-09-1007 on Windows, png2swf allows remote attackers to execute arbitrary code or cause a denial of service via a crafted file, related to a "User Mode Write AV near NULL starting at wow64!Wow64NotifyDebugger+0x000000000000001d."...

CVE-2017-8370

IrfanView version 4.44 32bit with FPX Plugin 4.45 allows remote attackers to execute arbitrary code or cause a denial of service Heap Corruption and application crash in processing a FlashPix .FPX file, a different vulnerability than CVE-2017-7721...

CVE-2017-9925

Removed by vendor...

CVE-2017-1253

CVE-2017-1253 affects IBM Security Guardium up to version 10.x, where a remote authenticated attacker could execute arbitrary commands via a specially crafted request due to an OS command injection vulnerability. The IBM Security Guardium bulletin confirms affected releases (including 9.0–9.5 and...

CVE-2017-1253

IBM Security Guardium 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 124633...