Google Chrome ServiceWorker Policy Enforcement Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. ServiceWorker is one of the background messaging components. A security vulnerability exists in ServiceWorker in versions of Google Chrome prior to 72.0.3626.81, which stems from the program failing to adequately...

UBUNTU-CVE-2019-6798

An issue was discovered in phpMyAdmin before 4.8.5. A vulnerability was reported where a specially crafted username can be used to trigger a SQL injection attack through the designer feature...

CVE-2018-16087

Lack of proper state tracking in Permissions in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

Unspecified Vulnerability in Apple iOS and Safari

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in the Safari component of Apple iOS...

PT-2018-14530 · Libmspack +1 · Libmspack +1

Name of the Vulnerable Software and Affected Versions: libmspack versions prior to 0.8alpha Description: The issue arises from the chmextract.c sample program distributed with libmspack, which fails to protect against absolute or relative pathnames in CHM files. This leads to a Directory Traversa...

Cisco SD-WAN Solution Command Injection Vulnerability

Cisco vEdge 100 Series Routers is a 100 series router product. vManage Network Management System is a network management system. SD-WAN Solution is a network extension solution that runs on it. A command injection vulnerability exists in the command-line interface CLI in Cisco SD-WAN Solution...

Google Chrome Security Bypass Vulnerability (CNVD-2018-22396)

Google Chrome is a web browser developed by the American company Google Google. A security vulnerability exists in Google Chrome versions prior to 69.0.3497.81. A remote attacker can exploit the vulnerability to bypass site quarantine restrictions after tab recovery...

UBUNTU-CVE-2018-12027

An Insecure Permissions vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 causes information disclosure in the following situation: given a Passenger-spawned application process that reports that it listens on a certain Unix domain socket, if any of the parent directories of sa...

PT-2018-2076 · D Link · D-Link Central Wifi Manager

Name of the Vulnerable Software and Affected Versions: D-Link Central WiFi Manager versions prior to 1.03r0100-Beta1 Description: The issue is related to the use of hardcoded credentials for the FTP service, which runs on port 9000. This allows a remote attacker to execute arbitrary PHP code by...

CVE-2018-11168

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 26 of 46...

WinShot Untrustworthy Search Path Vulnerability

WinShot is a screenshot tool based on the Windows platform. An untrustworthy search path vulnerability exists in WinShot 1.53a and earlier versions. An attacker can exploit this vulnerability to gain privileges with the help of a malicious DLL in the directory...

ALPINE-CVE-2017-12176

xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing malicious X client to cause X server to crash or possibly execute arbitrary code...

CVE-2017-15889

Command injection vulnerability in smart.cgi in Synology DiskStation Manager DSM before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field...

CVE-2017-8153

Huawei VMall for Android with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScript code in web pages without obtaining the Internet access...

Tcpdump ICMP Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run under the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.ICMP parser is one of the Internet Control Message Protocol parsers...

PT-2017-19317 · Osnexus · Quantastor

Name of the Vulnerable Software and Affected Versions: OSNEXUS QuantaStor versions prior to 4.3.1 Description: The issue allows an attacker to inject arbitrary HTML or JavaScript code as a parameter in a REST call, potentially leading to a cross-site scripting XSS attack. When an invalid REST cal...

Symantec VIP Access for Desktop DLL Load Native Code Execution Vulnerability

Symantec VIP Access for Desktop is a suite of online account security protection software from Symantec Symantec. A security vulnerability exists in versions of Symantec VIP Access for Desktop prior to 2.2.4. An attacker could exploit the vulnerability to run an external executable file...

git-annex Arbitrary Command Execution Vulnerability

git-annex is a distributed file synchronization system. A security vulnerability exists in git-annex versions prior to 6.20170818. A remote attacker can use an ssh URL with an initial dash in the hostname to execute arbitrary commands...

Cisco IOS Denial of Service Vulnerability (CNVD-2017-20387)

Cisco IOS is an operating system developed by Cisco for its network devices. A security vulnerability exists in IOS versions prior to 15.24S6, which stems from a program failure to initialize variables. A remote attacker could exploit this vulnerability to cause a denial of service CPU consumptio...

Oracle Berkeley DB Local Vulnerability (CNVD-2017-06551)

Oracle Berkeley DB is the United States Oracle Oracle, an open source embedded database programming library , it can be bound with C, C++, Java, Perl, Python, Tcl and many other languages. data store is one of the data storage components. A security vulnerability exists in the Data Store componen...