KLA11314 Multiple vulnerabilities in Foxit Reader

Multiple serious vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code and obtain sensitive information. Below is a complete list of vulnerabilities: 1. An use-after-free vulnerability in Format event of the ComboBox fields can be...

Hadoop YARN ResourceManager Command Execution Vulnerability

Apache Hadoop is an open source distributed system infrastructure. In YARN, ResourceManager is responsible for the unified management and allocation of all resources in the cluster, it receives resource reporting information from each node NodeManager, and assigns this information to each...

WebLogic 反序列化远程命令执行漏洞(CVE-2018-2893)

...

CVE-2018-14357

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription...

CVE-2018-14357

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription...

CVE-2018-14354

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription...

CVE-2018-14357

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription...

CVE-2018-14357

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription...

Linux io-prefetch SQL Injection Vulnerability in Multiple Qualcomm Products

Qualcomm MSM8909W and others are central processing unit CPU products for different platforms from Qualcomm, Inc.Linux io-prefetch is one of the Linux system preloading components. A SQL injection vulnerability exists in Linux io-prefetch in multiple Qualcomm products. A remote attacker could...

CVE-2018-14357

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription...

Eaton 9000X Drive Buffer Overflow Vulnerability

The Eaton 9000X Drive is an American Eaton inverter with integrated data logger functionality that allows multiple drives to be monitored simultaneously. A stack buffer overflow vulnerability exists in Eaton 9000X Drive version 2.0.29 and prior versions, which can be exploited by remote attackers...

parctechno.com XSS vulnerability

Open Bug Bounty ID: OBB-647600 Description| Value ---|--- Affected Website:| parctechno.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

GHSA-GHJX-3JG5-H6R2 Mercurial has Incorrect Permission Assignment for Critical Resource

In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name...

Antenna House Office Server Document Converter for Linux64 Stack Buffer Overflow Vulnerability

Antenna House Office Server Document Converter for Linux64 is a document format converter based on Linux64 platform from Antenna House, which is mainly used to convert Word, Excel and PowerPoint files to PDF, SVG and JPEG files, etc. It is mainly used to convert Word, Excel and PowerPoint files t...

QNAP Q'center Virtual Appliance Command Injection Vulnerability (CNVD-2018-17532)

QNAP Q'center Virtual Appliance is a virtual appliance from QNAP Systems for deploying Q'center QNAP NAS Management Platform in virtual environments such as Microsoft Hyper-V, VMware ESXi and Workstation. A command injection vulnerability exists in the change of password in QNAP Q'center Virtual...

ClipperCMS Cross-Site Scripting Vulnerability (CNVD-2018-13274)

ClipperCMS is a content management system CMS. A cross-site scripting vulnerability exists in ClipperCMS version 1.3.3. The vulnerability can be exploited by remote attackers to inject/store malicious scripts and execute them via the Full Name field of the Security - Manager Users or Security - W...

Revolution 2.6.4 and Prior Two Cricital Vulnerabilities; Upgrade Mandatory/Patch

Product: MODX Revolution Severity: Critical Versions: =2.6.4 Vulnerability types: Remote Execution / File/Directory Deletion Report date: 2018-Jul-11 Fixed date: 2018-Jul-12 Description On July 11 we received notice that there are two critical vulnerabilities that include remote script execution...

Microsoft Visual Studio Remote Code Execution Vulnerability

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. A remote code execution vulnerability exists in Microsoft Visual Studio that stems from the program...

Code injection

In Universal Robots Robot Controllers Version CB 3.1, SW Version 3.4.5-100, ports 30001/TCP to 30003/TCP listen for arbitrary URScript code and execute the code. This enables a remote attacker who has access to the ports to remotely execute code that may allow root access to be obtained...

Security Bulletin: Vulnerabilities in OpenSSL affect Rational ClearCase (CVE-2015-0209, CVE-2015-0286, CVE-2015-0288, CVE-2015-0293)

Summary OpenSSL vulnerabilities were disclosed on March 19, 2015 by the OpenSSL Project. OpenSSL is used by IBM Rational ClearCase. Rational ClearCase has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2015-0209 DESCRIPTION: OpenSSL could allow a remote attacker to execute...