Apple macOS High Sierra IOKit component input validation vulnerability (CNVD-2018-00184)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.IOKit is one of the components that reads system information. An input validation vulnerability exists in the IOKit component in Apple macOS High Sierra versions prior to 10.13.2. An attacker can exploi...

MistServer Cross-Site Scripting Vulnerability

MistServer is a full-featured next-generation streaming toolkit for OTT Internet streaming. A cross-site scripting vulnerability exists in versions of MistServer prior to 2.13. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Multiple local information disclosure vulnerabilities in Linux kernel 'block/bio.c'

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. Multiple local information disclosure vulnerabilities exist in the 'biomapuseriov and biounmapuser' functions of the block/bio.c file in versions of Linux kernel prior...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-37182)

ZOHO ManageEngine Applications Manager is a set of IT operations management solutions from ZOHO. A SQL injection vulnerability exists in ZOHO ManageEngine Applications Manager version 13. The vulnerability can be exploited by a remote attacker to inject SQL statements using the 'widgetid' paramet...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-37180)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-37246)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-37248)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...

DEBIAN-CVE-2017-16672

An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs when an Asterisk pjsip session object is created and that call gets rejected before the session itself is fully...

Linux kernel local denial of service vulnerability (CNVD-2017-33484)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the drivers/media/usb/dvb-usb/dib0700devices.c file in Linux kernel 4.13.11 and earlier versions. A local attacker ca...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-35597)

ZOHO ManageEngine Applications Manager is a set of IT operations management solutions from ZOHO. A SQL injection vulnerability exists in Zoho ManageEngine Applications Manager version 13. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands via the GraphicalView.do...

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2017-35598)

ZOHO ManageEngine Applications Manager is a set of IT operations management solutions from ZOHO. A SQL injection vulnerability exists in Zoho ManageEngine Applications Manager version 13. A remote attacker can exploit this vulnerability by executing arbitrary SQL commands with the 'name' paramete...

Linux kernel local denial of service vulnerability (CNVD-2017-33097)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the 'usbgetbosdescriptor' function in the drivers/usb/core/config.c file in versions of Linux kernel prior to 4.13.10. A loca...

Linux kernel local denial of service vulnerability (CNVD-2017-33090)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the sound/usb/mixer.c file in versions of Linux kernel prior to 4.13.8. A local attacker can exploit this vulnerability to...

Linux kernel local denial of service vulnerability (CNVD-2017-33089)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local denial of service vulnerability exists in the drivers/uwb/uwbd.c file in versions of Linux kernel prior to 4.13.6. A local attacker could exploit this vulnerability to...

DEBIAN-CVE-2017-16527

sound/usb/mixer.c in the Linux kernel before 4.13.8 allows local users to cause a denial of service sndusbmixerinterrupt use-after-free and system crash or possibly have unspecified other impact via a crafted USB device...

Apple macOS High Sierra ImageIO Component Denial of Service Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. imageIO is one of the static methods used to perform common image I/O operations. A denial of service vulnerability exists in the ImageIO component in Apple macOS High Sierra versions prior to 10.13.1....

Apple macOS High Sierra Kernel Security Bypass Vulnerability (CNVD-2017-34159)

Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security bypass vulnerability exists in the Kernel component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this vulnerability with...

Apple macOS High Sierra Fonts Forgery Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Fonts is one of the font components. A security vulnerability exists in the Fonts component of Apple macOS High Sierra versions prior to 10.13.1. A remote attacker can exploit this vulnerability to spoo...

Apple macOS High Sierra AppleScript Code Execution Vulnerability

Apple macOS High Sierra is a proprietary operating system developed by Apple for Mac computers, with AppleScript as one of the built-in scripting languages. A security vulnerability exists in the AppleScript component of Apple macOS High Sierra versions prior to 10.13.1. The vulnerability can be...

Apple macOS High Sierra Kernel Arbitrary Code Execution Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. An arbitrary code execution vulnerability exists in the Kernel component of Apple macOS High Sierra versions prior to 10.13.1. An attacker can exploit this...