CVE-2018-8998

In Advanced SystemCare Ultimate 11.0.1.58, the driver file Monitorx86.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c4060cc...

CVE-2018-7502

Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker who is able to execute code on the target may be able to exploit this vulnerability to obtain SYSTEM privileges...

Google Android Qualcomm Wma Privilege Elevation Vulnerability (CNVD-2018-06011)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Wma is one of the components of Qualcomm's Wma digital audio compression format. （Qualcomm Wma is one of...

Google Android Qualcomm WLAN elevation of privilege vulnerability (CNVD-2018-05996)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Wma is one of the components of Qualcomm's Wma digital audio compression format. （Qualcomm Wma is one of...

UBUNTU-CVE-2018-8754

The libevtrecordvaluesreadevent function in libevtrecordvalues.c in libevt before 2018-03-17 does not properly check for out-of-bounds values of user SID data size, strings size, or data size. NOTE: the vendor has disputed this as described in libyal/libevt issue 5 on GitHub...

PYSEC-2018-110

Ajenti version version 2 contains a Input Validation vulnerability in ID string on Get-values POST request that can result in Server Crashing. This attack appear to be exploitable via An attacker can freeze te server by sending a giant string to the ID parameter...

CVE-2018-7234

A vulnerability exists in Schneider Electric's Pelco Sarix Professional in all firmware versions prior to 3.29.67 which could allow arbitrary system file download due to lack of validation of SSL certificate...

CVE-2018-0223

A vulnerability in DesktopServlet in the web-based management interface of Cisco Security Manager could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the web-based interface. The vulnerability is due to insufficient validation o...

CVE-2018-0212

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The vulnerability is due to...

Cisco Identity Services Engine Authentication Privilege Elevation Vulnerability

Cisco Identity Services Engine ISE is a next-generation identity and access control policy platform that enables organizations to enforce compliance, enhance infrastructure security and streamline their service operations. An elevation of privilege vulnerability exists in the credential reset...

The vulnerability of the HPE Intelligent Management Center PLAT software platform, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the HPE Intelligent Management Center PLAT software is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the HPE Intelligent Management Center PLAT software platform, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the HPE Intelligent Management Center PLAT software is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the operatorGroupTreeSelectContent.xhtml component on the HPE Intelligent Management Center PLAT software platform allows a attacker to execute arbitrary code.

The vulnerability of the operatorGroupTreeSelectContent.xhtml component in the HPE Intelligent Management Center PLAT software platform is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using the...

The vulnerability of the select.xhtml component in the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the select.xhtml component in the HPE Intelligent Management Center PLAT software platform is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code using the beanName parameter...

The vulnerability of the iccSelectDevType.xhtml component on the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the iccSelectDevType.xhtml component in the HPE Intelligent Management Center PLAT software platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using the beanName parameter...

The vulnerability of the deviceSelect.xhtml component of the HPE Intelligent Management Center PLAT software platform allows a perpetrator to execute arbitrary code.

The vulnerability of the deviceSelect.xhtml component of the HPE Intelligent Management Center PLAT software platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using the beanName parameter...

Magento CMS APIs Cross-Site Request Forgery Vulnerability

Magento CMS is an open source PHP e-commerce content management system CMS of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions . A cross-site request forgery vulnerability exists in the Magento CMS APIs, which stems...

CVE-2017-8969

An improper input validation vulnerability in HPE Insight Control version 7.6 LR1 was found...

The vulnerability of the Qualcomm SafeSwitch component in Android operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Qualcomm SafeSwitch component in Android operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2018-05079)

Huawei DP300 and others are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device. A denial of service vulnerability exists in multiple Huawei products, which stems from a program that fails to adequately perform input validation. A remo...