Foxit Reader Link setAction Remote Code Execution Vulnerability

Foxit Reader is a small PDF document viewer and printing program. Foxit Reader has a security vulnerability in the Link setAction handling, which can be exploited to execute arbitrary code in the context of the current process, due to a lack of validation before performing an action on an object...

The vulnerability of Hanwha Techwin’s video surveillance camera software, SNH-V6410PN and SNH-V6410PNW, arises from insufficient validation of input data. This allows intruders to execute arbitrary code.

The vulnerability of the microprogrammed surveillance camera software from Hanwha Techwin, models SNH-V6410PN and SNH-V6410PNW, exists due to insufficient verification of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Multiple Cisco Products Adaptive Security Appliance and Firepower Threat Defense Software Denial of Service Vulnerabilities

Cisco 3000 Series Industrial Security Appliances ISR and others are security firewall appliances from Cisco.Adaptive Security Appliance ASA and Firepower Threat Defense FTD Software are firewall software used in different Cisco security appliances. Adaptive Security Appliance ASA and Firepower...

CVE-2018-1002100

An improper validation flaw exists in the kubernetes 'kubectl cp' command. An attacker, who could trick a user into using the command to copy files locally from a pod, could override files outside of the target directory of the command...

The vulnerability of the Microsoft Malware Protection Engine’s protection module against malicious programs arises from insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of the Microsoft Malware Protection Engine’s protection module mpengine.dll is related to insufficient input data validation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges using a specially crafted rar file...

The vulnerability of Cisco IOS and Cisco IOS XE operating systems, related to incorrect packet validation, allows attackers to trigger service failures or execute arbitrary code.

The vulnerability of Cisco IOS and Cisco IOS XE operating systems is related to incorrect data validation. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown of the watchdog timer or execute arbitrary code by sending a specially crafted Smart Install messag...

Cisco IOS Software and IOS XE Software Denial of Service Vulnerabilities

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the DHCP option 82 encapsulation feature in Cisco IOS Software and IOS XE Software, which arises from the program's failure to perform full inp...

CVE-2018-0196

A vulnerability in the web-based user interface web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to write arbitrary files to the operating system of an affected device. The vulnerability is due to insufficient input validation of HTTP requests that are sent to the web...

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the HP Intelligent Management Center software exists due to insufficient verification of the string passed by the user before it is used to execute system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2018-9047

In Windows Master aka Windows Optimization Master 7.99.13.604, the driver file WoptiHWDetect.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002841...

CVE-2018-9047

In Windows Master aka Windows Optimization Master 7.99.13.604, the driver file WoptiHWDetect.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002841...

CVE-2018-9046

In Windows Master aka Windows Optimization Master 7.99.13.604, the driver file WoptiHWDetect.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0xf100282d...

Advanced SystemCare Ultimate Denial of Service Vulnerability (CNVD-2018-07110)

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A security vulnerability exists in the Monitorwin10x64.sys driver file in Advanced SystemCare Ultimate version 11.0.1.58, which...

CVE-2018-1283

It has been discovered that the modsession module of Apache HTTP Server httpd, through version 2.4.29, has an improper input validation flaw in the way it handles HTTP session headers in some configurations. A remote attacker may influence their content by using a "Session" header...

Windows Master Denial of Service Vulnerability (CNVD-2018-07020)

Windows Master aka Windows Optimization Master is a set of Windows optimization tools. The tool features system detection, system optimization, system cleanup and system maintenance. A security vulnerability exists in the WoptiHWDetect.SYS driver file in Windows Master version 7.99.13.604, which...

Advanced SystemCare Ultimate Denial of Service Vulnerability (CNVD-2018-06952)

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A security vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate version 11.0.1.58, which originates...

Advanced SystemCare Ultimate Denial of Service Vulnerability

Advanced SystemCare Ultimate is a set of virus protection software for Windows systems. The software can be used to protect against viruses, malware, spyware, etc. A security vulnerability exists in the Monitorx86.sys driver file in Advanced SystemCare Ultimate version 11.0.1.58, which originates...

Windows Master Denial of Service Vulnerability (CNVD-2018-07028)

Windows Master aka Windows Optimization Master is a set of Windows optimization tools. The tool features system detection, system optimization, system cleanup and system maintenance. A security vulnerability exists in the WoptiHWDetect.SYS driver file in Windows Master version 7.99.13.604, which...

CVE-2018-9005

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorwin7x64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060d0...