CVE-2017-0738

A information disclosure vulnerability in the Android media framework audioserver. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37563371...

Privilege escalation

An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain access to another user's workspace by making multiple login requests to the server...

CVE-2017-3648

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Charsets. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...

Code injection

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2017-1199

IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within...

mysql: Client mysqldump unspecified vulnerability (CPU Jul 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client mysqldump. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple...

mysql: Server: DDL unspecified vulnerability (CPU Apr 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protoco...

JoySale 2.2.1 - Arbitrary File Upload

JoySale 2.2.1 - Arbitrary File Upload JoySale Arbitrary File Upload Exploit Title: JoySale Arbitrary File Upload Exploit Author: Mutlu Benmutlu Date: 1/08/2017 Vendor Homepage: http://www.hitasoft.com/product/joysale-advanced-classifieds-script/ Version: Joysale v2.2.1 latest Google Dork:...

Koozali Foundation SME Server Open Redirect Vulnerability Vulnerability

Koozali Foundation SME Server is a cross-platform, scalable Linux server from the Koozali Foundation. An open redirection vulnerability exists in the user web login function in Koozali Foundation SME Server versions 8.x, 9.x, and 10.x. The vulnerability can be exploited to gain unauthorized acces...

Remote File Inclusion

Magento is vulnerable to remote file inclusion. The vulnerability is possible because the fetchView function in the MageCoreBlockTemplateZend class does not enforce security mechanisms, allowing an authenticated administrator to execute arbitrary PHP code on the web server...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2017-17015)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which the MySQL Server component is a server component. A security vulnerability exists in the Server: Replication subcomponent of the MySQL Server component of Oracle MySQL. A remotely authorized...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher (CNVD-2017-17501)

Oracle Fusion Middleware is a comprehensive middleware product family consisting of SOA and middleware products.BI Publisher is one of the reporting components. Oracle BI Publisher version 11.1.1.7.0 contains a security vulnerability in the implementation of the Web Server component, which can be...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher (CNVD-2017-17502)

Oracle Fusion Middleware is a comprehensive middleware product family consisting of SOA and middleware products.BI Publisher is one of the reporting components. A security vulnerability exists in the Web Server component implementation of Oracle BI Publisher version 11.1.1.7.0, which can be...

UBUNTU-CVE-2017-3637

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: X Plugin. Supported versions that are affected are 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

UBUNTU-CVE-2017-3640

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

UBUNTU-CVE-2017-3639

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Microsoft Exchange Server Cross-Site Scripting Vulnerability (CNVD-2017-15997)

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A cross-site scripting vulnerability exists in Microsoft Exchange Server that stems from Microsoft Exchange Outlook Web Acce...

MCollective Remote Code Execution Vulnerability

MCollective is a framework for building Server Orchestration and parallel work execution systems. A security vulnerability exists in MCollective versions prior to 2.10.4. An attacker could exploit this vulnerability to execute arbitrary code on the server...

ISC BIND Security Restriction Bypass Vulnerability

ISC BIND is widely used domain name server software. A security restriction bypass vulnerability exists in ISC BIND, which could be exploited by remote attackers to submit a special request and perform unauthorized operations...

CVE-2017-2850

In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in...