KLA11899 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An information...

KLA11099 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, bypass security restrictions, spoof user interface, cause denial of service. Below is a complete list of...

Windows 2008 September 2017 Multiple Security Updates

The remote Windows host is missing multiple security updates released on 2017/09/12. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated use...

Google Chrome Type Obfuscation Error Vulnerability

Google Chrome is an open source web browser. A type obfuscation vulnerability exists in Google Chrome V8, which allows remote attackers to exploit the vulnerability to submit a special request and execute arbitrary code...

Sql injection

Multiple SQL injection vulnerabilities in SmartCMS v.2...

CVE-2014-9558

CVE-2014-9558 affects SmartCMS v.2 (Smartwebsites). Multiple SQL injection vulnerabilities arise from improper handling of user input before SQL query construction, allowing an attacker to abuse query logic and potentially access/modify database data. Public sources describe the vendor/product as...

CVE-2017-12589

ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack...

VMware NSX-V Edge Denial of Service Vulnerability

VMware NSX-V Edge is a network and security virtualization platform from VMware. The platform provides virtual machines with full-service, programmable and portable virtual networks deployed on common IP network hardware. A denial of service vulnerability exists in VMware NSX-V Edge versions 6.3....

Apache Sling Servlets Post 2.3.20 Cross Site Scripting Vulnerability

Exploit for multiple platform in category remote exploits CVE-2017-9802: Apache Sling XSS vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Sling Servlets Post 2.3.20 Description: The Javascript method Sling.evalString uses the javascript eval...

CVE-2017-9659

A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

CVE-2017-9660

A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

Input validation

An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Monitouch V-SFT is installed in a directory with weak access controls by default, which could allow an authenticated attacker with local access to escalate privileges...

CVE-2017-9662

An Improper Privilege Management issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. Monitouch V-SFT is installed in a directory with weak access controls by default, which could allow an authenticated attacker with local access to escalate privileges...

Heap overflow

A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

Stack overflow

A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

CVE-2017-9660

A Heap-Based Buffer Overflow was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. A heap-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

CVE-2017-9659

CVE-2017-9659 affects Fuji Electric Monitouch V-SFT before version 5.4.43.0. The issue is a stack-based buffer overflow in parsing V8 project files, which can crash the application and may allow remote code execution. Public references (ZDI advisories) describe exploitation requiring user interac...

CVE-2017-9659

A Stack-Based Buffer Overflow issue was discovered in Fuji Electric Monitouch V-SFT versions prior to Version 5.4.43.0. The stack-based buffer overflow vulnerability has been identified, which may cause a crash or allow remote code execution...

CVE-2017-9662

CVE-2017-9662 describes an Improper Privilege Management vulnerability in Fuji Electric Monitouch V-SFT, affecting versions prior to 5.4.43.0. The issue arises because Monitouch V-SFT is installed in a directory with default weak access controls, enabling an authenticated attacker with local acce...

CVE-2017-9660

Fuji Electric Monitouch V-SFT is affected by CVE-2017-9660 (heap-based buffer overflow) in versions prior to 5.4.43.0. The issue arises in parsing V8 project files and may cause a crash or remote code execution. Exploitation details vary across sources: ZDI describes remote code execution requiri...