Integer overflow vulnerability in multiple Huawei products (CNVD-2018-05077)

Huawei DP300 and others are products of Huawei, China.DP300 is a video conferencing terminal.RP200 is an all-in-one video conferencing device. An integer overflow vulnerability exists in multiple Huawei products, where the vulnerability stems from a program failing to adequately perform input...

CVE-2017-17657

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup TimeRange method requests. The issue result...

CVE-2017-17652

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup Count method requests. The issue results fr...

CVE-2017-17424

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUScheduleSet Get method requests. The issue results...

CVE-2018-0135

A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensitive information on an affected system. The vulnerability exists because the affected software improperly validates user-supplied search input. An attacker could exploit this...

CVE-2018-0122

A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers could allow an authenticated, local attacker to overwrite system files that are stored in the flash memory of an affected system. The vulnerability is due to insufficient...

CVE-2018-0123

A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to use certain diagnostic shell commands that can overwrite system files. These system files may be sensitive and should not be able to be overwritten by a user of...

Sandstorm Security Bypass Vulnerability

Sandstorm is a personal cloud platform. The platform features file storage, application management, task and project management, and more. A security vulnerability exists in versions prior to Sandstorm build 0.203, which stems from the program failing to adequately validate email addresses. A...

CVE-2018-6785

In Jiangmin Antivirus 16.0.0.100, the driver file KSysCall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008254...

CVE-2018-6783

In Jiangmin Antivirus 16.0.0.100, the driver file KSysCall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A00825C...

CVE-2018-6768

In Jiangmin Antivirus 16.0.0.100, the driver file KSysCall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008090...

IBM Tivoli Integrated Portal Cross-Site Scripting Vulnerability (CNVD-2018-02992)

IBM Tivoli Integrated Portal TIP is a set of core components from IBM USA that provide management elements such as network security and database management. A cross-site scripting vulnerability exists in IBM TIP versions 2.2.0.0 through 2.2.0.15, which arises from the program failing to properly...

Micropoint Proactive Defense Software Denial of Service Vulnerability (CNVD-2018-02975)

Micropoint proactive defense software is a set of third-generation anti-virus software from China's Oriental Micropoint Micropoint Company. The software uses proactive defense technology to analyze and judge to achieve the purpose of defense against viruses. A security vulnerability exists in the...

CVE-2018-6651

In the uncurlwsaccept function in uncurl.c in uncurl before 0.07, as used in Parsec before 140-3, insufficient Origin header validation accepting an arbitrary substring match for WebSocket API requests allows remote attackers to bypass intended access restrictions. In Parsec, this means full...

CVE-2018-6626

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110005.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000035...

CVE-2018-6631

In Micropoint proactive defense software 2.0.20266.0146, the driver file mp110009.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80000170...

Huawei eSpace 7950 and 8950 Remote Code Execution Vulnerability (CNVD-2018-02550)

Huawei eSpace 7950 and 8950 are both 7950 and 8950 series IP Phones from Huawei, China. A remote code execution vulnerability exists in the Import Signal Tone feature and Import Language Packet feature of the Huawei eSpace 7950 and 8950 due to the program failing to adequately validate messages. ...

Huawei eSpace 7950 and 8950 Remote Code Execution Vulnerability

Huawei eSpace 7950 and 8950 are both 7950 and 8950 series IP Phones from Huawei, China. A remote code execution vulnerability exists in the Import Signal Tone feature and Import Language Packet feature of the Huawei eSpace 7950 and 8950 due to the program failing to adequately validate messages. ...

HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2018-03951)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability...

CVE-2018-5441

An Improper Validation of Integrity Check Value issue was discovered in PHOENIX CONTACT mGuard firmware versions 7.2 to 8.6.0. mGuard devices rely on internal checksums for verification of the internal integrity of the update packages. Verification may not always be performed correctly, allowing ...