UBUNTU-CVE-2017-8797

The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet from a remote attacker. This type value is uninitialized upon encountering certain error conditions. This value is used a...

UBUNTU-CVE-2017-10788

The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impact by triggering 1 certain error responses from a MySQL server or 2 a loss of a network connection to a MySQL server. The...

Multiple SQL Injection Vulnerabilities in Ranzhi Collaboration Office Management System

RANZI Coworking Management System is an open source coworking system for small and medium-sized enterprises. Ranzhi Collaboration Office Management System version 4.2.3 has multiple SQL injection vulnerabilities, which can be exploited by attackers to obtain sensitive database information...

Linux Kernel NFSv4 Denial of Service Vulnerability

Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the U.S. NFSv4 server is one of the distributed file system servers. A security vulnerability exists in the NFSv4 server in versions of Linux kernel prior to 4.11.3, which stems from the program...

kernel: Incorrectly mapped contents of PIE executable

The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected...

ALPINE-CVE-2014-8127

LibTIFF 4.0.3 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted TIFF image to the 1 checkInkNamesString function in tifdir.c in the thumbnail tool, 2 compresscontig function in tiff2bw.c in the tiff2bw tool, 3 putcontig8bitCIELab function in...

Reflective Cross-site Scripting Vulnerability in Five Fingers CMS System

Five Fingers CMS is an open source content management system suitable for portals, corporate website builders, mobile websites and microblogging promotion. Five Fingers CMS system version v4.0.0 reflective cross-site scripting vulnerability, attackers by inserting XSS malicious code to perform...

kernel: Incorrectly mapped contents of PIE executable

The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected...

kernel: Incorrectly mapped contents of PIE executable

The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where the stack is mapped allowing attackers to more easily manipulate the stack. Linux Kernel version 4.11.5 is affected...

DEBIAN-CVE-2017-1000369

Exim supports the use of multiple "-p" command line arguments which are malloc'ed and never free'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch...

Fastspot BigTree Cross-Site Scripting Vulnerability

Fastspot BigTree is the United States Fastspot company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in the admin.php file in Fastspot BigTree 4.2.18 and earlier versions. A remote attacker can exploit this vulnerability to inject...

CVE-2016-4471

ManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code...

CVE-2017-6638

A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges equivalent to the Microsoft Windows SYSTEM account. The vulnerability is due to incomplete input...

DEBIAN-CVE-2017-9462

In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name...

Lenovo Service Bridge Spoofing Vulnerability

Lenovo Service Bridge is a Windows program from the Chinese company Lenovo Lenovo that automatically detects the serial number and model number of your device. A spoofing vulnerability exists in the signature verification logic in code signing certificates in versions prior to Lenovo Service Brid...

Five fingers CMS system s parameters exist arbitrary file download vulnerability

Five Fingers CMS is an open source content management system suitable for portals, corporate website builders, mobile websites and microblogging promotion. Five Fingers CMS system version 4.0.0 there are arbitrary file download vulnerabilities. Due to the failure of effective filtering parameters...

Lenovo Service Bridge Local Code Execution Vulnerability

Lenovo Service Bridge is a Windows program from the Chinese company Lenovo Lenovo that automatically detects the serial number and model number of your device. A local code execution vulnerability exists in versions prior to Lenovo Service Bridge 4. An attacker could exploit this vulnerability to...

UBUNTU-CVE-2014-9983

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...

CHICKEN Scheme Denial of Service Vulnerability

CHICKEN Scheme is a compiler and interpreter based on the Scheme language , it can compile Scheme code into standard C code , and supports extensions . A denial of service vulnerability exists in CHICKEN Scheme versions prior to 4.13. An attacker can exploit this vulnerability by passing an...

PT-2017-2221 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.11.1 Description: The issue exists due to insufficient input validation in the tcp v6 syn recv sock function. This can be exploited by a local user to cause a denial of service or possibly have other unspecifi...