Multiple Pivotal Software Products Accept Expired Certificates Vulnerability

Pivotal Cloud Foundry PCF, UAA, and UAA-Release are products of Pivotal Software, Inc. of the U.S. PCF is a suite of open-source Platform-as-a-Service PaaS cloud computing platforms that provide features such as container scheduling, continuous delivery, and automated service deployment; UAA is a...

DOT IT Banque Zitouna app for iOS Man-in-the-Middle Attack Vulnerability

DOT IT Banque Zitouna app for iOS is an iOS-based mobile application developed by the DOT IT team for accessing Banque Zitouna Bank with quick access to manage bank accounts, manage balances, pay bills and send money. The security vulnerability in version 2.1 of the DOT IT Banque Zitouna app for...

Fatek Automation PLC Ethernet Module Configuration Tool Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Fatek Automation PLC Ethernet Module Configuration Tool. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

Sql injection

A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to properly validate user input, which may allow for an unauthenticated attacker to remotely execute arbitrary code in the form of SQL queries...

LBTC Mobile Information Disclosure Vulnerability

LBTC Mobile is a banking service that you can access anytime, anywhere. Lee Bank & Trust lbtc-mobile/id1068984753 app 3.0.1 for iOS The app fails to validate X.509 certificates for SSL servers, allowing man-in-the-middle attackers to spoof servers and gain access to sensitive information by...

ThinPrint TPClnt/TPView Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of ThinPrint. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of print...

CVE-2017-9034

Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates...

Pi Engine Cross-Site Scripting Vulnerability

PI Engine is an open-source CMS system that is more widely used within some Internet companies. A cross-site scripting vulnerability exists in PI Engine, which stems from the program failing to properly validate user-supplied input. When an unsuspecting user browses the affected site, an attacker...

Multiple Cross-Site Scripting Vulnerabilities in Splunk Enterprise and Lite

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze machine-generated data, including data generated by all IT systems and infrastructures physical, virtual, and cloud.Splunk Enterprise is...

IBM Curam Social Program Management Cross-Site Scripting Vulnerability (CNVD-2017-08126)

IBM Curam Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. IBM Curam Social Program Management suffers from a cross-site scripting vulnerability that originates from the program...

CVE-2017-6650

A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments. An...

CVE-2017-6636

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 11.1 could allow an authenticated, remote attacker to view any file on an affected system. The vulnerability exists because the affected software does not perform proper input validation of HT...

CVE-2017-8940

The Zipongo - Healthy Recipes and Grocery Deals app before 6.3 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

TradeKing FOREXTrader for iPhone app for iOS Sensitive Rest Vulnerability

TradeKingFOREXTraderforiPhoneappforiOS is the United States of America Karson TradeKing company for iOS a highly personalized operating environment with the foreign exchange trading platform. A sensitive information disclosure vulnerability exists in versions 2.9.12 to 2.9.14 of...

Microsoft .NET Framework Security Feature Bypass Vulnerability

Microsoft Windows is the popular computer operating system. A security feature bypass vulnerability exists in the Microsoft .NET Framework and .NET Core component that does not properly validate certificates, which could allow an attacker to bypass certain restrictions and perform unauthorized...

State Bank of India State Bank Anywhere app for iOS Man-in-the-Middle Attack Vulnerability

State Bank of India State Bank Anywhere app for iOS is a mobile app for iOS from State Bank of India with features like quick access to manage bank accounts, manage balances, pay bills and send money. A security vulnerability exists in version 5.1.0 of the State Bank of India State Bank Anywhere...

Memory out-of-bounds access vulnerability in WPS text docreader module (CNVD-2017-06210)

WPS is an office software. A memory out-of-bounds access vulnerability exists in the WPS text docreader module. The vulnerability is caused due to failure to validate the length of a value, which can be exploited by an attacker to obtain sensitive information...

Memory out-of-bounds access vulnerability in WPS text docreader module (CNVD-2017-06211)

WPS is an office software. A memory out-of-bounds access vulnerability exists in the WPS text docreader module. The vulnerability is caused due to failure to validate address information effectively and can be exploited by an attacker to obtain sensitive information...

Palo Alto PAN-OS Cross-Site Scripting Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. Palo Alto Networks PAN-OS suffers from a cross-site scripting vulnerability that stems from a failure to adequately validate user input. An attacker could use this vulnerability to...

Microsoft .NET Framework Remote Code Execution Vulnerability (KB4014982)

This host is missing a critical security update according to Microsoft Security Update KB4014982 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...