RubyGems Secure Bypass Leakage (CNVD-2017-30738)

RubyGems is a Ruby package manager from the RubyGems organization, which is used to distribute and manage Ruby packages. A security vulnerability exists in RubyGems 2.6.12 and earlier versions. An attacker can exploit the vulnerability to inject malicious commands into a user's terminal and execu...

July 2017 Preview of the Quality Rollups for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1: July 18, 2017

July 2017 Preview of the Quality Rollups for the .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, and 4.7 for Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1: July 18, 2017 View products that this article applies to. Summary This article lists the Quality Rollups for the .NET Framework...

Red Hat CVS Command Injection Vulnerability

CVS is a free and open source version control system that can be used under a variety of Linux and Unix operating systems, and can also run on Microsoft Windows operating systems. A security vulnerability exists in CVS version 1.12.x. A remote attacker can exploit a repository with a specially...

PT-2017-3344

Name of the Vulnerable Software and Affected Versions CVS versions 1.12.x git-annex versions prior to 6.20170818 Description The issue is related to the improper handling of data when interacting with a remote repository over SSH. This could allow a remote attacker to execute arbitrary code by...

CVE-2017-10180

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: CMRO. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-10123

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Container. The supported version that is affected is 12.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server...

CVE-2017-10091

Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: UI Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

UBUNTU-CVE-2015-5244

The NSSCipherSuite option with ciphersuites enabled in modnss before 1.0.12 allows remote attackers to bypass application restrictions...

PYSEC-2017-148

Cross-site scripting XSS vulnerability in ZMI pages that use the managetabsmessage in Zope 2.11.4, 2.11.2, 2.10.9, 2.10.7, 2.10.6, 2.10.5, 2.10.4, 2.10.2, 2.10.1, 2.12...

Trend Micro OfficeScan 'Proxy.php' Command Injection Vulnerability

Trend Micro OfficeScan is a suite of distributed anti-virus software from Trend Micro. A command injection vulnerability exists in Trend Micro OfficeScan version 11 and XG 12. A remote attacker could exploit this vulnerability to execute arbitrary code...

Trend Micro OfficeScan Command Injection Vulnerability

Trend Micro OfficeScan is a suite of distributed anti-virus software from Trend Micro. A command injection vulnerability exists in Trend Micro OfficeScan version 11 and XG 12. A remote attacker could exploit this vulnerability to execute arbitrary code...

Zoho ManageEngine OpManager Encryption Algorithm Vulnerability

Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. A security vulnerability exists in Zoho ManageEngine OpManager versions 11 through 12.2. An attacker can exploit the vulnerability to decode certificates...

Oracle Application Object Library Remote Vulnerability

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. Oracle Application Object Library AOL, Application Object Library is one of the system management components. A security vulnerability exists in the...

CVE-2017-6755

A vulnerability in the web portal of the Cisco Prime Collaboration Provisioning PCP Tool could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web interface of an affected system. More Information: CSCvc90312. Known Affected Releases:...

Apple macOS Sierra kext tools component memory corruption vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers. kext tools is one of the components for system driver installation and privilege repair. A memory corruption vulnerability exists in the kext tools component in Apple macOS Sierra versions prior to 10.12.6...

Apple macOS Sierra Kernel Security Bypass Vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.Kernel is one of the kernel components. A security bypass vulnerability exists in the Kernel component of Apple macOS Sierra versions prior to 10.12.6. The vulnerability can be exploited by an attacker to...

Apple iTunes for Windows iTunes Arbitrary Code Execution Vulnerability

Apple iTunes for Windows is a suite of Windows-based media player applications from Apple Inc. that are used to play and manage digital music and video files. An arbitrary code execution vulnerability exists in the iTunes component of Apple iTunes for Windows versions prior to 12.6.2. The...

CVE-2017-7067

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

OPENSUSE-SU-2017:1765-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: ffmpeg was updated to 2.8.12, fixing a lot of security issues. boo1046211...

CVE-2017-6704

A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary file downloads that could allow the attacker to read files from the underlying filesystem. More Information: CSCvc90335. Known Affected...