KLA11015 Race condition vulnerability in Google Chrome

A race condition vulnerability was found in the WebRTC component of Google Chrome earlier than 58.0.3029.96. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely. Technical details Vulnerability was found in framebuffer2.cc NB:...

KLA11007 Multiple vulnerabilities in Mozilla Thunderbird

Multiple serious vulnerabilities have been found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, read and write local files. Below is a complete list of vulnerabilities: 1. A use-after-free vulnerabilit...

Oracle One-to-One Fulfillment Security Bypass Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management, etc. Oracle One-to-One Fulfillment is one of the...

IBM License Metric Tool and BigFix Inventory Security Bypass Vulnerability

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

Trend Micro Control Manager cgiShowClientAdm Security Bypass

The version of Trend Micro Control Manager running on the remote host is affected by a security bypass vulnerability when processing calls to the cgiShowClientAdm web function due to a failure to provide authentication for the functionality that exposes, modifies, or deletes DLP templates involve...

Adobe Flash Player: Multiple vulnerabilities

Background The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites. Description Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact A remote attacke...

OpenStack Keystone Security Bypass Vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration and Rackspace, Inc. in the U.S. OpenStack Keystone is one of the projects used for authentication, providing identity, token, directory, and policy services. A security bypass...

OnePlus 3 and 3T OxygenOS security bypass vulnerability (CNVD-2017-06819)

The OnePlus 3 and 3T are both smartphones from China's OnePlus Technology OnePlus.OxygenOS is the operating system that comes with the device. A security spare vulnerability exists in OxygenOS versions prior to 4.0.3 on OnePlus 3 and 3T devices. An unauthorized attacker could exploit the...

Oracle Solaris Remote Shell Code Execution (CVE-2017-3623)

A security bypass vulnerability has been reported in Oracle Solaris. The vulnerability is due to an error in the way the server validates RPC requests from unauthorized users. A remote attacker can exploit this issue by sending specially crafted RPC requests to the target. Successful exploitation...

SolarWinds Log and Event Manager Postgres Database Security Bypass Vulnerability

SolarWinds Log and Event Manager is a log and event manager that provides real-time log analysis, memory event correlation, and threat attack response. A security bypass vulnerability exists in the Postgres database of SolarWinds Log and Event Manager 6.3.1, which stems from the database having a...

TP-Link C2 and C20i Security Bypass Vulnerability (CNVD-2017-06904)

The TP-LINK C2 and C20i, among others, are wireless router products from China P&L TP-LINK. vsftpd is a server that runs on a UNIX-like operating system. A security bypass vulnerability exists in the TP-Link C2 and C20i, which allows remote attackers to submit a special request to bypass security...

Apple iOS webkit element handling validation vulnerability

Apple iOS is an operating system for Apple smart devices. A validation vulnerability exists in the Webkit processing element used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can be used to bypass security...

Oracle VirtualBox Security Bypass Vulnerability - 01 (Apr 2017) - Linux

Oracle VirtualBox is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apple iOS webkit CSP bypass vulnerability

Apple iOS is an operating system for Apple smart devices. A CSP restriction bypass vulnerability exists in Webkit used by Apple iOS, which allows attackers to exploit the vulnerability to build malicious web pages that can be clicked on by users, which can bypass security restrictions and perform...

TP-Link TL-SG108E Security Bypass Vulnerability

The TP-Link TL-SG108E is a Gigabit Ethernet switch. A security vulnerability exists in the TP-Link TL-SG108E. A remote attacker can exploit the vulnerability by submitting a special request for an unauthorized update process...

Intel Security Anti-Virus Engine Security Bypass Vulnerability

Intel Security Anti-Virus Engine is an anti-virus engine for multiple operating systems that detects and removes viruses, spyware, Trojans, and worms in real time, ensuring comprehensive network protection for desktops and laptops. A security vulnerability exists in Intel Security AVE. A local...

MediaWiki security bypass vulnerability (CNVD-2017-06567)

MediaWiki is a free and free web-based Wiki engine developed and maintained by the Wikimedia Foundation and MediaWiki volunteers, which can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki. A remote attacker can exploit t...

Oracle VirtualBox Security Bypass Vulnerability - 01 (Apr 2017) - Mac OS X

Oracle VirtualBox is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle VirtualBox Security Bypass Vulnerability - 01 (Apr 2017) - Windows

Oracle VirtualBox is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

October CMS 1.0.412 - Multiple Vulnerabilities

October CMS v1.0.412 several vulnerabilities Information =========== Name: October CMS v1.0.412 build 412 Homepage: http://octobercms.com Vulnerability: several issues, including PHP code execution Prerequisites: attacker has to be authenticated user with media or asset management permission CVE:...