Microsoft Edge Security Feature Bypass Vulnerability (CNVD-2018-03511)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Edge is one of the web browsers that comes with the system. A security feature bypass vulnerability exists in Edge in Microsoft Windows 10 versions 1607, 1703, and Windows Server 2016, which stems fro...

Update to add SHA-2 code signing support for Windows Server 2008 SP2

Update to add SHA-2 code signing support for Windows Server 2008 SP2 Summary This update provides support for the Secure Hash Algorithm-2 SHA-2 code signing and verification functionality in the 64-bit version of Windows Server 2008 Service Pack 2 SP2 which includes the following: Support for...

Flexense SyncBreeze Enterprise Buffer Overflow Vulnerability

Flexense SyncBreeze Enterprise is a set of file synchronization tools from Flexense Canada. The tool has features such as file management and data synchronization. A buffer overflow vulnerability exists in the Add command feature in Flexense SyncBreeze Enterprise versions 10.3.14 and earlier. An...

CVE-2018-0136

A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router ASR 9000 Series could allow an unauthenticated, remote attacker to trigger a reload of one or more Trident-based line cards, resulting in a denial of service DoS condition. The...

CVE-2018-4836

A vulnerability has been identified in TeleControl Server Basic V3.1. An authenticated attacker with a low-privileged account to the TeleControl Server Basic's port 8000/tcp could escalate his privileges and perform administrative operations...

Cisco StarOS Command Injection Vulnerability

Cisco ASR 5000 Series routers are a 5000 Series security router appliance from Cisco USA. the Cisco StarOS operating system is a set of virtualized operating systems that run on it. A command injection vulnerability exists in the CLI of the Cisco StarOS operating system in Cisco ASR 5000 Series...

CVE-2018-0102

A vulnerability in the Pong tool of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability exists because the affected software attempts to free the same area of memory twice...

Cisco Nexus 7000 Series Switches and 7700 Series Switches Cisco NX-OS Software Denial of Service Vulnerability

Cisco Nexus 7000 Series Switches and 7700 Series Switches are switching devices from Cisco. the NX-OS Software set of data center operating systems that run on them. A denial of service vulnerability exists in Cisco NX-OS Software versions 7.21D1, 7.22D11, and 7.22D12 in Cisco Nexus 7000 Series...

SQL Injection Vulnerability in DocCms 2016

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is a free and open source enterprise website building system, enterprise website generation system. DocCms 2016 has a SQL injection vulnerability,...

CVE-2017-13209

creationtimestamp| type| source ---|---|--- 2018-01-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43513...

Denial of Service Vulnerability in Multiple F5 Products (CNVD-2018-01138)

F5 BIG-IP 2000s and so on are the products of F5 Corporation in the U.S.A. F5 BIG-IP 2000s is an all-in-one network appliance that integrates the functions of network traffic management, application security management, and load balancing, etc. BIG-IP LTM is a local traffic manager. A denial of...

CVE-2017-17570

creationtimestamp| type| source ---|---|--- 2017-12-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43261...

CVE-2017-17588

creationtimestamp| type| source ---|---|--- 2017-12-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43251...

CVE-2017-12579

creationtimestamp| type| source ---|---|--- 2017-12-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43223...

Multiple Cisco Products Cisco NX-OS System Software Unauthorized Access Vulnerability

Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisco Nexus 7700 Series Switches are all Cisco switches.NX-OS System The NX-OS System Software is the operating system used in these switches. An unauthorized access vulnerability exists in Cisco NX-OS System Software...

CVE-2017-12332

A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to arbitrary locations. The vulnerability is due to insufficient restrictions in the patch installation process. An attacker could exploit this vulnerability by installin...

CVE-2017-12333

A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a software image. The vulnerability is due to insufficient NX-OS signature verification for software images. An authenticated, local attacker could exploit thi...

CVE-2017-12351

A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker to read and send packets outside the scope of the guest shell container. An attacker would need valid administrator credentials to perform this attack. The vulnerability is due t...

CVE-2017-11832

The Microsoft Windows embedded OpenType EOT font engine in Windows 7 SP1, Windows Server 2008 SP2 and 2008 R2 SP1, and Windows Server 2012 allows an attacker to potentially read data that was not intended to be disclosed, due to the way that the Microsoft Windows EOT font engine parses specially...

Foscam IP Video Camera Buffer Overflow Vulnerability

Foscam C1 Indoor HD Camera is a wireless HD IP camera from Foscam China. A buffer overflow vulnerability exists in the Multi-Camera interface in the Foscam C1 Indoor HD Camera. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to port 10000 to overwrite...