LetoDMS SQL Injection Vulnerability (CNVD-2017-35203)

LetoDMS is a document management system based on PHP+MySQL development. A SQL injection vulnerability exists in LetoDMSCore/Core/inc.ClassDMS.php in LetoDMS before version 3.3.8, which can be exploited by remote attackers to execute arbitrary SQL commands...

Unspecified Vulnerability in Oracle Sun Systems Products Suite Oracle Integrated Lights Out Manager (CNVD-2017-31862)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Oracle Integrated Lights Out Manager ILOM is one of the server management tools. An unspecified vulnerability exists in the System Management subcomponent of the Oracle ILOM component of the Oracle Sun...

PT-2017-19308 · Siemens · Siemens Talon Tc Bacnet Automation Controllers +1

Name of the Vulnerable Software and Affected Versions: Siemens APOGEE PXC and TALON TC BACnet Automation Controllers versions prior to V3.5 Description: A directory traversal issue could allow a remote attacker with network access to the integrated web server to obtain information on the structur...

Cybele Software Thinfinity Remote Desktop Workstation Directory Traversal Vulnerability

Cybele Software Thinfinity Remote Desktop Workstation is a browser-based remote desktop tool from Cybele Software, USA. A directory traversal vulnerability exists in Cybele Software Thinfinity Remote Desktop Workstation version 3.0.0.3 32-bit and 64-bit. A remote attacker can exploit this...

DEBIAN-CVE-2015-3420

The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service login process crash via vectors related to handshake failures...

Pragyan CMS SQL Injection Vulnerability (CNVD-2017-34577)

Pragyan CMS is a multi-user, modular PHP and MySQL based Content Management System CMS. The system supports custom built-in frameworks, user group rights management, search engine optimization and more. A SQL injection vulnerability exists in Pragyan CMS version 3.0. A remote attacker can exploit...

Moodle cross-site scripting vulnerability (CNVD-2017-27611)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site scripting vulnerability exists in the contact form on the 'non-respondent...

CVE-2017-1002151

Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization...

Tcpdump OSPFv3 Parser Buffer Overflow Vulnerability

Tcpdump is a set of sniffing tools developed by the Tcpdump team that run at the command line. The tools allow users to intercept and display TCP/IP and other packets sent or received over a network connection to that computer.OSPFv3 parser is one of the open shortest path first protocol parsers....

UBUNTU-CVE-2017-13036

The OSPFv3 parser in tcpdump before 4.9.2 has a buffer over-read in print-ospf6.c:ospf6decodev3...

Pragyan CMS SQL Injection Vulnerability (CNVD-2017-32462)

Pragyan CMS is a multi-user, modular PHP and MySQL based Content Management System CMS. The system supports custom built-in frameworks, user group rights management, search engine optimization and more. A SQL injection vulnerability exists in Pragyan CMS version 3.0. A remote attacker can exploit...

Liblouis Denial of Service Vulnerability (CNVD-2017-28739)

Liblouis is an open-source Braille translator written in C. It can be used to translate Braille into other languages. A security vulnerability exists in the 'lougetALine' function in compileTranslationTable.c:346 in Liblouis version 3.2.0. A remote attacker can exploit this vulnerability to cause...

Liblouis Read Across Boundaries Vulnerability

Liblouis is an open-source Braille translator written in C. It can be used to translate Braille into other languages. An out-of-bounds read vulnerability exists in the 'lougetALine' function of compileTranslationTable.c:343 in Liblouis version 3.2.0. A remote attacker could exploit this...

Reflected Cross-Site Scripting Vulnerability in S-CMS V3.0 build20170808 /admin/demo.asp Page

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A reflective cross-site scripting vulnerability exists in the /admin/demo.asp page in S-CMS V3.0 build20170808. This vulnerability allows an attacker to construct XSS statements and perform pop-up box...

CloudBees Jenkins Git Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed tasks . Git Plugin is one of the plug-ins used to manage the...

Youngzsoft CCFile Denial of Service Vulnerability

Youngzsoft CCFile aka CC File Transfer is a file transfer program. The program is capable of transferring files via Internet and LAN. A security vulnerability exists in Youngzsoft CCFile version 3.6. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request to...

CVE-2017-12784

In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...

UBUNTU-CVE-2017-12862

In modules/imgcodecs/src/grfmtpxm.cpp, the length of buffer AutoBuffer src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...

kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lacked certain checks for the end of a buffer. A remote attacker could trigger a pointer-arithmetic error or possibly cause other unspecified impacts using crafted requests related to fs/nfsd/nfs3xdr.c and...

CVE-2017-10079

Vulnerability in the Oracle Hospitality Suites Management component of Oracle Hospitality Applications subcomponent: Core. The supported version that is affected is 3.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality...