PT-2018-15685 · Oracle +3 · Java Se +4

Name of the Vulnerable Software and Affected Versions: Oracle Java SE versions 8u152 and 9.0.1 Description: A difficult to exploit vulnerability in the Java SE component allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require...

Sangoma NetBorder / Vega Session Controller Remote Command Execution

Description Sangoma NetBorder / Vega Session Controller before 2.3.12-80-GA allows remote unauthenticated attackers to execute arbitrary commands via the web interface. Technical Details The ShellExec class implemented in api/ShellExec.class.php is extensively used by various PHP scripts in the...

Sql injection

SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the web server. The saveGoogleAdWords function in smartgooglecode.php did not use prepared statements and did not sanitize...

CVE-2018-3811

SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the web server. The saveGoogleAdWords function in smartgooglecode.php did not use prepared statements and did not sanitize...

PT-2018-19373

PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious values in the configuration file. Attackers can craft configuration files with oversized input that overflows the stack buffer and execute she...

OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2018-00751)

Internet Explorer is a web browser from Microsoft. An information disclosure vulnerability exists in Microsoft Internet Explorer, which can be exploited by an unauthenticated, remote attacker to gain access to sensitive information on the target system...

H323 Protocol Input Check Vulnerability in Multiple Huawei Products

Huawei AR120-S and others are router products from Huawei China. An input checksum vulnerability exists in the H323 protocol of several Huawei products, which can be exploited by an unauthenticated attacker to send a special H323 message to cause a DOS attack due to insufficient message checksum...

CVE-2017-17439

In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fields for client name or realm. The parser would unconditionally dereference NULL pointers in that case, leading to a segmentation fault. This is related to th...

Core: DoS via bad certificate

.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of service vulnerability exists when .NET Core improperly handles parsing certificate data, aka ".NET COR...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2017-34719)

Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer is implemented with a memory corruption vulnerability that can be exploited by unauthenticated, remote attackers to execute arbitrary code on the target system...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2017-34716)

Internet Explorer is a web browser from Microsoft. An information disclosure vulnerability exists in the implementation of Microsoft Internet Explorer, which can be exploited by unauthenticated, remote attackers to gain access to sensitive information on a target system...

VulnCheck KEV: CVE-2025-34043

A remote command injection vulnerability exists in Vacron Network Video Recorder NVR devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP...

CVE-2017-10155

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Pluggable Auth. Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2017-10357

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2017-10621

A denial of service vulnerability in telnetd service on Juniper Networks Junos OS allows remote unauthenticated attackers to cause a denial of service. Affected Junos OS releases are: 12.1X46 prior to 12.1X46-D71; 12.3X48 prior to 12.3X48-D50; 14.1 prior to 14.1R8-S5, 14.1R9; 14.1X53 prior to...

Cisco Adaptive Security Appliance Software Denial of Service Vulnerability (CNVD-2017-33343)

The Cisco ASA 5500 Series Adaptive Security Appliances are modular platforms for delivering security and VPN services, providing firewall, IPS, anti-X, and VPN services. A security vulnerability in the Direct Authentication feature of the Cisco Adaptive Security Appliance ASA Software allows an...

CVE-2017-12253

A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of cross-site request forgery CSRF protection. An attacker could exploit this vulnerability by tricking the user of a web...

User Login and Management - Multiple Vulnerabilities

Exploit for php platform in category web applications ----------------------------------------------------------------------------------- | |---------------------------------------------------------------------------------- 1 admin dashboard authentication bypass Description : An Attackers are ab...

User Login and Management - Multiple Vulnerabilities

User Login and Management - Multiple Vulnerabilities ----------------------------------------------------------------------------------- | |---------------------------------------------------------------------------------- 1 admin dashboard authentication bypass Description : An Attackers are abl...