3608 matches found
Cesanta Mongoose Remote Code Execution Vulnerability
Cesanta Mongoose is a set of embedded servers from the Irish company Cesanta. websocket protocol is one of the websocket communication protocols. A remote code execution vulnerability exists in the Websocket protocol implementation in Cesanta Mongoose version 6.8. A remote attacker can exploit th...
Oracle MySQL Connector/Net Subcomponent Unauthorized Operation Vulnerability
Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Connectors is one of the drivers to connect applications that use MySQL. A security vulnerability exists i...
LAVA Computer MFG Ether-Serial Link Authentication Bypass Vulnerability
Ether-Serial Link is an Ethernet serial link device from LAVA Computer MFG. An authentication bypass vulnerability exists in LAVA Computer MFG Ether-Serial Link versions 6.01.00/29.03.2007 and earlier, which can be exploited by an attacker with the same IP address to bypass authentication by...
DNSmasq Arbitrary Code Execution Vulnerability (CNVD-2017-29276)
DNSmasq is a small and handy tool for configuring DNS and DHCP for small networks that provides DNS functionality and optional DHCP functionality. An arbitrary code execution vulnerability in DNSmasq 2.77 and earlier versions allows remote attackers to trigger a stack overflow and execute arbitra...
DNSmasq Information Disclosure Vulnerability
DNSmasq is a small and handy tool for configuring DNS and DHCP for small networks that provides DNS functionality and optional DHCP functionality. An information disclosure vulnerability in DNSmasq 2.77 and prior versions allows remote attackers to trigger a flaw in the DHCPv6 relay code by sendi...
CVE-2017-13998
An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitive information from unauthorized access...
CVE-2017-12244
A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote attacker to cause high CPU utilization or to cause a denial of service DoS condition because the Snort process restarts unexpectedly. The vulnerability is due...
UBUNTU-CVE-2017-0810
A remote code execution vulnerability in the Android media framework libmpeg2. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38207066...
ALPINE-CVE-2017-14494
dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests...
DEBIAN-CVE-2017-14493
Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service crash or execute arbitrary code via a crafted DHCPv6 request...
dnsmasq: information leak in the DHCPv6 relay code
An information leak was found in dnsmasq in the DHCPv6 relay code. An attacker on the local network could send crafted DHCPv6 packets to dnsmasq causing it to forward the contents of process memory, potentially leaking sensitive data...
dnsmasq: stack buffer overflow in the DHCPv6 code
A stack buffer overflow was found in dnsmasq in the DHCPv6 code. An attacker on the local network could send a crafted DHCPv6 request to dnsmasq which would cause it to a crash or, potentially, execute arbitrary code...
dnsmasq: stack buffer overflow in the DHCPv6 code
A stack buffer overflow was found in dnsmasq in the DHCPv6 code. An attacker on the local network could send a crafted DHCPv6 request to dnsmasq which would cause it to a crash or, potentially, execute arbitrary code...
USN-3430-1 dnsmasq vulnerabilities
Felix Wilhelm, Fermin J. Serna, Gabriel Campana and Kevin Hamacher discovered that Dnsmasq incorrectly handled DNS requests. A remote attacker could use this issue to cause Dnsmasq to crash, resulting in a denial of service, or possibly execute arbitrary code. CVE-2017-14491 Felix Wilhelm, Fermin...
Drupal Open Redirect Vulnerability
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An open redirection vulnerability exists in URL-related API functions in Drupal versions 6.x prior to 6.35 and 7.x prior to 7.35. A remote attacker can exploit this...
IBM Lifecycle Query Engine of Jazz Reporting Service Information Disclosure Vulnerability
IBM Lifecycle Query Engine of Jazz Reporting Service is a lifecycle query engine for Jazz Reporting Service from IBM, USA. A security vulnerability exists in IBM Lifecycle Query Engine of Jazz Reporting Service versions 6.0 through 6.0.4. An attacker could exploit the vulnerability to obtain...
LOYTEC LVIS-3ME Remote Code Execution Vulnerability
LVIS-3ME is a graphical user interface from LOYTEC. A remote code execution vulnerability exists in LOYTEC LVIS-3ME versions prior to 6.2.0, which can be exploited by an attacker to remotely execute arbitrary code due to the application's failure to utilize a sufficiently random number to generat...
LOYTEC LVIS-3ME Relative Path Traversal Vulnerability
LVIS-3ME is a graphical user interface from LOYTEC. A relative path traversal vulnerability exists in LOYTEC LVIS-3ME versions prior to 6.2.0, which can be exploited by an attacker to create or modify files, or execute arbitrary code, due to the inability of the web user interface to prevent user...
