Adobe Creative Cloud Security Update (APSB17-13) - Windows

Adobe Creative Cloud is prone to a security bypass and a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Linux kernel NFSv2 and NFSv3 server security bypass vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the U.S. NFSv2 and NFSv3 servers are among the server sides. A security bypass vulnerability exists in the NFSv2 and NFSv3 servers in Linux kernel versions 4.10.13 and earlier. A remote attacker...

Invision Power Services Community Suite Security Bypass Vulnerability

Invision Power Services IPS Community Suite is an integrated application for building communities on the web. A security bypass vulnerability exists in versions of IPS Community Suite prior to 4.1.9. An attacker could exploit the vulnerability to hijack a session...

ImageWorsener Security Bypass Vulnerability (CNVD-2017-06218)

ImageWorsener is a set of image scaling and processing utilities. A security bypass vulnerability exists in the bmprreaduncompressed function in the imagew-bmp.c file of the libimageworsener.a file in versions of ImageWorsener prior to 1.3.1. A remote attacker could use this vulnerability to caus...

IrfanView FPX Plugin Security Bypass Vulnerability

IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security bypass vulnerability exists in IrfanView version 4.44 32bit prior to FPX plugin 4.45. An attacker c...

Craft CMS Security Bypass Vulnerability

Craft CMS is a content management system CMS for developers and content managers. A security bypass vulnerability exists in Craft CMS versions prior to 2.6.2976. An attacker can exploit this vulnerability to perform unauthorized operations...

TP-Link C2 and C20i Security Bypass Vulnerability

The TP-Link C2 and C20i are router devices from China P&L. A security bypass vulnerability exists in the TP-Link C2 and C20i, which can be exploited by remote attackers to submit a special request to bypass security restrictions and perform unauthorized operations...

KLA11015 Race condition vulnerability in Google Chrome

A race condition vulnerability was found in the WebRTC component of Google Chrome earlier than 58.0.3029.96. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely. Technical details Vulnerability was found in framebuffer2.cc NB:...

KLA11007 Multiple vulnerabilities in Mozilla Thunderbird

Multiple serious vulnerabilities have been found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, read and write local files. Below is a complete list of vulnerabilities: 1. A use-after-free vulnerabilit...

Oracle One-to-One Fulfillment Security Bypass Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Oracle One-to-One Fulfillment is one of the...

IBM License Metric Tool and BigFix Inventory Security Bypass Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

Trend Micro Control Manager cgiShowClientAdm Security Bypass

The version of Trend Micro Control Manager running on the remote host is affected by a security bypass vulnerability when processing calls to the cgiShowClientAdm web function due to a failure to provide authentication for the functionality that exposes, modifies, or deletes DLP templates involve...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

SolarWinds Log and Event Manager Postgres Database Security Bypass Vulnerability

SolarWinds Log and Event Manager is a log and event manager that provides real-time log analysis, memory event correlation, and threat attack response. A security bypass vulnerability exists in the Postgres database of SolarWinds Log and Event Manager 6.3.1, which stems from the database having a...

TP-Link C2 and C20i Security Bypass Vulnerability (CNVD-2017-06904)

The TP-LINK C2 and C20i, among others, are wireless router products from China P&L TP-LINK. vsftpd is a server that runs on a UNIX-like operating system. A security bypass vulnerability exists in the TP-Link C2 and C20i, which allows remote attackers to submit a special request to bypass security...

Oracle Solaris Remote Shell Code Execution (CVE-2017-3623)

A security bypass vulnerability has been reported in Oracle Solaris. The vulnerability is due to an error in the way the server validates RPC requests from unauthorized users. A remote attacker can exploit this issue by sending specially crafted RPC requests to the target. Successful exploitation...

OpenStack Keystone Security Bypass Vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration and Rackspace, Inc. in the U.S. OpenStack Keystone is one of the projects used for authentication, providing identity, token, directory, and policy services. A security bypass...

OnePlus 3 and 3T OxygenOS security bypass vulnerability (CNVD-2017-06819)

The OnePlus 3 and 3T are both smartphones from China's OnePlus Technology OnePlus.OxygenOS is the operating system that comes with the device. A security spare vulnerability exists in OxygenOS versions prior to 4.0.3 on OnePlus 3 and 3T devices. An unauthorized attacker could exploit the...

Apple iOS webkit element handling validation vulnerability

Apple iOS is an operating system for Apple smart devices. A validation vulnerability exists in the Webkit processing element used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can be used to bypass security...

Oracle VirtualBox Security Bypass Vulnerability - 01 (Apr 2017) - Linux

Oracle VirtualBox is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...