Unspecified vulnerability in Apache Traffic Server HTTP/2 experimental feature

Apache Traffic Server is the United States Apache Apache Software Foundation of an efficient , scalable HTTP proxy and caching server . An unspecified vulnerability exists in the HTTP/2 experimental feature in Apache Traffic Server versions 5.3.x prior to 5.3.2. No details of the vulnerability ar...

DEBIAN-CVE-2015-5206

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168...

UBUNTU-CVE-2015-5206

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168...

CVE-2017-12423

NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines SVMs via unspecified vectors...

CVE-2017-8483

creationtimestamp| type| source ---|---|--- 2017-06-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42243...

CVE-2017-2495

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The issue involves the "Safari" component. It allows remote attackers to cause a denial of service application crash via a crafted web site that improperly interacts with the histor...

MantisBT 'Timeline include' page cross-site scripting vulnerability

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A cross-site scripting vulnerability exists in the Timeline include page used in the My View myviewpage.php and User...

CVE-2017-2444

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreGraphics" component. It allows remote attackers to execute arbitrary code or cause a denial of...

CVE-2017-2456

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Kernel" component. A race condition allows attackers to execute arbitrary code in a privileged...

CVE-2016-4341

NetApp Clustered Data ONTAP before 8.3.2P7 allows remote attackers to obtain SMB share information via unspecified vectors...

Smart Guard Network Manager SQL Injection Vulnerability

Smart Guard Network Manager is a software that manages your network, bandwidth and network security. An SQL injection vulnerability exists in the ?menuid parameter of the searchallhistory.php page in Smart Guard Network Manager version 6.3.2, which originates from the program failing to adequatel...

FFmpeg Denial of Service Vulnerability (CNVD-2016-12568)

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A denial of service vulnerability exists in FFmpeg 3.2 and earlier versions. An attacker can exploit this vulnerability to cause an application crash denial of service...

Alienvault OSSIM and USM Cross-Site Scripting Vulnerabilities

AlienVault OSSIM and USM are both products of AlienVault Corporation, U.S.A. OSSIM is an open source security information management system. USM is a security management platform that provides security monitoring, security event management and reporting, and threat awareness system. A cross-site...

Red Hat JBoss BPMS HTML Injection Vulnerability

Red Hat JBoss BPM Suite is a business process management platform from Red Hat, Inc. that brings together all the features of JBoss BRMS. The platform provides additional support for modeling, automation, simulation and business process monitoring. An HTML injection vulnerability exists in Redhat...

Red Hat OpenShift Enterprise Denial of Service Vulnerability

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, U.S. OpenShift Enterprise is an open source version of the private cloud. A denial of service vulnerability exists in Negotiator in Red Hat OpenShift Enterprise versions 3.1 and 3.2, which can be exploited by...

NetApp OnCommand System Manager Denial of Service Vulnerability

NetApp OnCommand System Manager is a suite of storage management tools from NetApp, USA. The tool supports simplifying, controlling, and automating the setup and ongoing management of NetApp storage systems. A denial of service vulnerability exists in versions of NetApp OnCommand System Manager...

The vulnerability of the Cisco IOS operating system, which allows a malicious actor to trigger a service failure

Cisco IOS software contains numerous vulnerabilities in the implementation of Network Meeting Directory Lightweight Directory Access Protocol, LDAP, Session Initiation Protocol, and H.323 protocols. When these vulnerabilities are exploited, a CSCtd10712 error can be triggered, resulting in a rout...

Puppet Server and Agent Arbitrary Code Execution Vulnerability

Puppet Server and Agent are both U.S. Puppet Labs based on the client/server C/S architecture of the configuration management tool, the tool can be used to manage configuration files, users, cron tasks, packages, system services and so on. An arbitrary code execution vulnerability exists in Puppe...

CVE-2016-4502

Environmental Systems Corporation ESC 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions and execute arbitrary functions via a modified parameter...

Apple iOS WebKit Canvas Arbitrary Code Execution Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices. WebKit is an open source web browser engine developed by KDE, Apple, Google and other companies, and is currently used by Apple Safari and Google Chrome, etc. WebKit is used as one of the drawing components. Canvas is used fo...