CVE-2017-17150

Timergrp module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an DoS vulnerability due to insufficient validation of the...

Memory Access Overflow Vulnerability in Polaris Office 2017 (CNVD-2018-05711)

Polaris Office is an office software developed by INFRAWARE of Korea. You can view and edit Word documents, Excel tables, Microsoft Office PowerPoint slides and other commonly used office documents. A memory access overflow vulnerability exists in PWord.exe of Polaris Office 2017 when handling...

Memory Access Overflow Vulnerability in Polaris Office 2017 (CNVD-2018-05702)

Polaris Office 2017 is an office software developed by INFRAWARE Korea, which can be used to view and edit Word documents, Excel tables, Microsoft Office PowerPoint slides, and other commonly used office documents. Polaris Office 2017 suffers from a memory access overflow vulnerability when worki...

Memory access overflow vulnerability in Polaris office 2017

Polaris Office 2017 is an office software developed by INFRAWARE Korea, which can be used to view and edit Word documents, Excel tables, Microsoft Office PowerPoint slides, and other commonly used office documents. Polaris Office 2017 suffers from a memory access overflow vulnerability when...

Tiki CSV Injection Vulnerability

Tiki is a suite of open source content management and portal applications from the Tiki software community that can be used to create Web applications, portals, corporate intranets, extranets, and more. A security vulnerability exists in Tiki version 17.1 that stems from the program's failure to...

Quagga BGP Backend Program NOTIFY Denial of Service Vulnerability

Quagga is an open source routing software. Quagga BGP backend program handling NOTIFY has a security vulnerability that allows remote attackers to exploit the vulnerability to submit special requests for denial-of-service attacks...

Microsoft SharePoint Server Elevation of Privilege Vulnerability (CNVD-2018-05732)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A...

Input validation

Tiki 17.1 does not validate user input for special characters; consequently, a CSV Injection attack can open a CMD.EXE or Calculator window on the victim machine to perform malicious activity, as demonstrated by an "=cmd|' /C calc'!A0" payload during User Creation...

CVE-2017-17162

Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 have a memory leak vulnerability due to memory don't be released when an local authenticated attack...

CVE-2017-17162

Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 have a memory leak vulnerability due to memory don't be released when an local authenticated attack...

Input validation

IKEv2 in Huawei IPS Module V500R001C00, V500R001C00SPC200, V500R001C00SPC300, V500R001C00SPC500, V500R001C00SPH303, V500R001C00SPH508, V500R001C20, V500R001C20SPC100, V500R001C20SPC100PWE, V500R001C20SPC200, V500R001C20SPC200B062, V500R001C20SPC200PWE, V500R001C20SPC300B078, V500R001C20SPC300PWE,...

CVE-2017-17162

Huawei Secospace USG6600 V500R001C30SPC100, Secospace USG6600 V500R001C30SPC200, Secospace USG6600 V500R001C30SPC300, USG9500 V500R001C30SPC100, USG9500 V500R001C30SPC200, USG9500 V500R001C30SPC300 have a memory leak vulnerability due to memory don't be released when an local authenticated attack...

The vulnerability of the Mercurial version control software lies in its inability to properly handle special elements used in the operating system’s command line. This allows a perpetrator to execute arbitrary code.

The vulnerability of the Mercurial version control software is related to the lack of measures to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created Git subrepository...

SoftZone office demo prone to denial of service vulnerability (CNVD-2018-04283)

SoftZone Office RZoffice is an office software, which is compatible with MS Office and consists of three parts: word processing, spreadsheet and presentation. A denial-of-service vulnerability exists in RZoffice Presentations.exe when processing special pptx files. An attacker can exploit the...

Important: java-1.8.0-openjdk

Issue Overview: SingleEntryRegistry incorrect setup of deserialization filter JMX, 8186998 It was discovered that the JMX component of OpenJDK failed to properly set the deserialization filter for the SingleEntryRegistry in certain cases. A remote attacker could possibly use this flaw to bypass...

Extreme Office 2017 version V1.0.3.3 suffers from a null pointer reference vulnerability (CNVD-2018-03746)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2017 suffers from a null pointer reference vulnerability when dealing with special ppt files, which can be exploited by an attacker to cause a denial of service...

Denial of Service Vulnerability in Extreme Office 2017 Version 1.0.3.3

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2017 suffers from a denial of service vulnerability when dealing with special doc files, which can be exploited by attackers to cause a denial of service attack...

Null Pointer Reference Vulnerability in AnyPDF Reader 5.5

AnyPDF Reader is a simple and practical PDF reader developed by Beijing Ancetone Information Technology Co. AnyPDF Reader version 5.5 has a null pointer reference vulnerability when dealing with special PDF files. An attacker could exploit this vulnerability to cause a denial of service attack...

Stack Overflow Vulnerability in Gaaiho Reader

Gaaiho Reader DocuCom PDF Reader is a PDF reader launched by Beijing Zei Nan Xinyu Technology Co. Gaaiho Reader suffers from a stack overflow vulnerability when processing special PDF files. This allows attackers to exploit the vulnerability to launch a denial of service attack...

The vulnerability of the microprogrammed software of the Digizo ShAirDisk PTW-WMS1, caused by the failure to implement measures to neutralize special elements, allows a intruder to execute arbitrary commands of the operating system.

The vulnerability of the microprogrammed wireless mobile disk storage device Digizo ShAirDisk PTW-WMS1 arises due to the lack of measures to neutralize the special elements used in the operating system’s team. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...