CVE-2017-1377

Summary: CVE-2017-1377 affects IBM Runbook Automation. The vulnerability stems from error messages that reveal sensitive information about the application and database, which could be used to aid further attacks. The IBM security bulletin confirms the issue and provides remediation paths: if usin...

SQL Injection Vulnerability in Hanchao B2B2C Multi-User Mall System Type Parameter

Hanchao B2B2C multi-user mall system is a PHP multi-user mall website system source code developed in PHP + MySQL. Hanchao B2B2C multi-user mall system type parameter SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

WordPress Statistics Plugin SQL Injection

An SQL injection vulnerability has been reported in WordPress Statistics Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Windows 10 to Get Built-in Protection Against Most Ransomware Attacks

Ransomware Ransomware Everywhere Not a Single Place to Hide! But, Microsoft has a simple solution to this problem to protect millions of its users against most ransomware attacks. Two massive ransomware attacks — WannaCry and Petya also known as NotPetya — in a month have caused chaos and...

CVE-2017-3743

The CVE-2017-3743 issue affects Lenovo ToolsCenter components: Advanced Settings Utility (ASU), UpdateXpress System Pack Installer (UXSPI), and Dynamic System Analysis (DSA). When multiple users are concurrently logged into a system and one user issues a command to a second machine, other users m...

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this vulnerability by...

OSIsoft PI Server 2017

CVSS v3 8.9 ATTENTION: Remotely exploitable. Vendor: OSIsoft Equipment: PI Server 2017 Vulnerabilities: Improper Authentication AFFECTED PRODUCTS OSIsoft reports that the vulnerabilities affect the following PI Server products: PI Data Archive versions prior to 2017. IMPACT Successful exploitatio...

Cisco Ultra Services Framework AutoVNF VNFStagingView Information Disclosure Vulnerability

A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to execute a relative path traversal attack, enabling an attacker to read sensitive files on the system. The vulnerability is due to insufficient sanity checks...

Important: samba

Issue Overview: A remote code execution flaw was found in Samba. A malicious authenticated samba client, having write access to the samba share, could use this flaw to execute arbitrary code as root. CVE-2017-7494 It was found that Samba always requested forwardable tickets when using Kerberos...

Cisco Prime Collaboration Provisioning Directory Traversal Arbitrary File Deletion Vulnerability

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software could allow an authenticated, remote attacker to delete any file from an affected system. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests and...

Windows PDF Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

CVE-2017-0335

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

Flash File Malicious Code Execution

A code execution vulnerability exist in Flash. The vulnerability is caused by a crafted SWF file with hidden malicious code. A remote attacker can exploit this issue in order to run malicious code on the effected system...

Arbitrary File Deletion

ImageMagick is vulnerable to arbitrary file deletion. A malicious user can exploit the library's ephemereal protocol and send a malicious image to the system, allowing the malicious user to delete arbitrary files...

GLSA-201701-70 : Firewalld: Improper authentication methods

The remote host is affected by the vulnerability described in GLSA-201701-70 Firewalld: Improper authentication methods A flaw in Firewalld allows any locally logged in user to tamper with or change firewall settings. This is due to how Firewalld handles authentication via polkit which is not...

MS15-048: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows 8, Windows RT, and Windows Server 2012: May 12, 2015

MS15-048: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows 8, Windows RT, and Windows Server 2012: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework. These...

Cisco FireSIGHT System Software Malicious Software Detection Bypass Vulnerability

A vulnerability in the malicious file detection and blocking features of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpte...

Downloads Resources over HTTP

Overview Affected versions of closurecompiler insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

system.aina.pl XSS vulnerability

Vulnerable URL: https://system.aina.pl/tbmodule/visas/form.php?callback=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

IPS Community Suite PHP remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

“IPS Community Suite “is a widely used in foreign countries the establishment of the station system. Recent is exposed in 4. 1. 1 2. 3 version and the following version there is a code injection vulnerability. This vulnerability via the control contentclass parameters submit the request to inject...