CVE-2017-13871

CVE-2017-13871 affects macOS Mail prior to the macOS 10.13.2 security updates. The issue allows a remote attacker to read cleartext email content that S/MIME would normally protect, by exploiting the recipient’s missing S/MIME certificate installation. Affected software is macOS High Sierra (and ...

CVE-2017-13874

CVE-2017-13874 affects iOS before 11.2 (Mail). The issue arises from incorrect S/MIME certificate selection, which may allow a remote attacker to bypass the intended encryption protection mechanism. Technical details show the vulnerability lies in the Mail component’s handling of S/MIME certifica...

Weak Encryption Algorithm Vulnerability in Multiple Huawei Products

Huawei AR120-S and others are router products from Huawei China. A weak cryptographic algorithm vulnerability exists in multiple Huawei products due to the program failing to properly parse the values in a certificate. A remote attacker could exploit this vulnerability to forge RSA signatures wit...

Memory leak vulnerability in multiple Huawei products (CNVD-2017-37729)

Huawei AR120-S and others are router products from Huawei China. A buffer overflow vulnerability exists in multiple Huawei products due to a program failing to adequately validate some values in a message. A remote attacker could exploit this vulnerability by sending specially crafted SIP message...

Techno - Portfolio Management Panel SQL Injection Vulnerability

Techno - Portfolio Management Panel is a set of portfolio management panel scripts. A SQL injection vulnerability exists in Techno - Portfolio Management Panel 2017-11-16 and earlier versions. A remote attacker can exploit the vulnerability by sending the 's' parameter to the panel/search.php fil...

Memory leak vulnerability in multiple Huawei products (CNVD-2017-37732)

Huawei AR120-S and others are router products from Huawei China. A memory leak vulnerability exists in multiple Huawei products due to a program failing to properly free allocated memory for processing messages. A remote attacker could exploit the vulnerability by sending specially crafted H323...

Memory leak vulnerability in multiple Huawei products (CNVD-2017-37727)

Huawei AR120-S and others are router products from Huawei China. The buffer overflow vulnerability exists in multiple Huawei products and is due to the program failing to adequately verify certificates. A remote attacker could exploit the vulnerability by sending specially crafted certificates to...

CVE-2017-17696

Techno - Portfolio Management Panel through 2017-11-16 allows full path disclosure via an invalid s parameter to panel/search.php...

CVE-2017-17696

Techno - Portfolio Management Panel is affected by an information disclosure vulnerability through an invalid s parameter to panel/search.php, enabling disclosure of sensitive paths. The CVE notes impact as a path disclosure; affected versions include 2017-11-16 and earlier. Connected sources (CN...

FS IMDB Clone SQL Injection Vulnerability

FS IMDB Clone is a set of PHP-based scripts for online movie ticket booking websites. A SQL injection vulnerability exists in FS IMDB Clone version 1.0. The vulnerability can be exploited to inject SQL by sending the 'f' parameter to the movie.php file, the 's' parameter to the tvshow.php file, o...

s-b-z.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-451246 Description| Value ---|--- Affected Website:| s-b-z.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Multiple Huawei Products Input Checksum Vulnerability

Huawei AR120-S and others are router products from Huawei China. The input validation vulnerability exists in multiple Huawei products due to the program failing to adequately validate input. A remote attacker could exploit this vulnerability by constructing malformed Stream Control Transmission...

Ubuntu: Security Advisory (USN-3508-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

m-s-promotion.de XSS vulnerability

Vulnerable URL: http://www.m-s-promotion.de/werbeartikel/suchen?category=&&=bug%22%3E%3Csvg%3E%3Cscript%3E/%3C@/%3Eprompt/OPENBUGBOUNTY/%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

s-w-o.pl XSS vulnerability

Open Bug Bounty ID: OBB-449806 Description| Value ---|--- Affected Website:| s-w-o.pl Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Apple macOS High Sierra Mail component plaintext delivery vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Mail component is one of the email components. A security vulnerability exists in the Mail component of Apple macOS High Sierra prior to 10.13.2, which stems from the fact that an encrypted S/MIME email...

Debian: Security Advisory (DSA-4059-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

s-tuning.cz XSS vulnerability

Open Bug Bounty ID: OBB-449190 Description| Value ---|--- Affected Website:| s-tuning.cz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2017-14374

The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 aka 2016 R3.20 is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionalit...

CVE-2017-14374

The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 aka 2016 R3.20 is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionalit...