CVE-2017-1487

IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626...

IKEv2 Protocol Denial of Service Vulnerability in Multiple Huawei Products

Huawei IPS Module, NGFW Module, NIP6300/6600 series products and Secospace USG series are the new generation of professional intrusion prevention and firewall products launched by Huawei for enterprise, IDC, campus network and carrier customers. A denial-of-service vulnerability exists in the IKE...

IKARUS anti.virus pool corruption vulnerability

IKARUS anti.virus is a set of antivirus products from IKARUS Security Software Austria. ntguardx64.sys is one of the self-protection system. A security vulnerability exists in IKARUS anti.virus version 2.16.15 in version 0.18780.0.0 of ntguardx64.sys. No details of the vulnerability are provided ...

DEBIAN-CVE-2017-17085

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length...

Princeton PTW-WMS1 Buffer Overflow Vulnerability

The Princeton PTW-WMS1 is a wireless storage device from Princeton Japan. A buffer overflow vulnerability exists in the Princeton PTW-WMS1 using firmware version 2.000.012. A remote attacker can exploit this vulnerability to cause a denial of service with the help of specially crafted packets...

EMC ScaleIO MDM, SDS and LIA Denial of Service Vulnerabilities

EMC ScaleIO is a software-defined solution for converting DAS storage to shared data block storage from EMC Corporation, U.S.A. MDM, SDS, and LIA are among the message resolvers. A denial of service vulnerability exists in MDM, SDS, and LIA in EMC ScaleIO version 2.0.1.x. The vulnerability can be...

SimpleXML XML External Entity Injection Vulnerability

SimpleXML is a Java-based high-performance XML serialization and configuration framework. An XML external entity injection vulnerability exists in SimpleXML version 2.7.1. An attacker can exploit this vulnerability to implement a server-side request forgery attack to obtain sensitive information ...

CVE-2017-12300

A vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the Server Message Block Version 2 SMB2 protocol. The vulnerability is due to the incorrect detection of an SMB2 fil...

PT-2017-12476 · Cisco · Cisco Firepower System

Name of the Vulnerable Software and Affected Versions: Cisco Firepower System Software affected versions not specified Description: A flaw in the SNORT detection engine could allow an unauthenticated, remote attacker to bypass a file policy configured to block the Server Message Block Version 2...

Apache CouchDB Elevation of Privilege Vulnerability

Apache CouchDB is the United States Apache Apache Software Foundation , a free , open source , document-oriented database , is a use of JSON as a storage format , JavaScript as a query language , MapReduce and HTTP as the API of the NoSQL database . An elevation of privilege vulnerability exists ...

IKARUS anti.virus ntguard.sys driver local elevation of privilege vulnerability

IKARUS anti.virus is the Austrian IKARUS Security Software company a set of antivirus software products. ntguard.sys driver is one of the self-protection system driver . IKARUS anti.virus version 2.16.7 of the ntguard.sys driver has an arbitrary write vulnerability, the vulnerability stems from t...

Ingenious School Management System SQL Injection Vulnerability

Ingenious School Management System is a web-based school management system. The system supports adding courses, posting grades and managing teachers. A SQL injection vulnerability exists in the /view/friendprofile.php file in Ingenious School Management System version 2.3.0. A remote attacker can...

Circle with Disney Routing Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A routing vulnerability exists in the cloud infrastructure in Circle with Disney version 2.0.1. An attacker can exploit this vulnerabili...

Circle with Disney Command Injection Vulnerability (CNVD-2017-33183)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A command injection vulnerability exists in the WiFi configuration feature in Circle with Disney version 2.0.1. The vulnerability can be...

Circle with Disney Remote Access Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A remote access vulnerability exists in the remote control feature of Circle with Disney version 2.0.1. A remote attacker can exploit th...

Circle with Disney Remote Code Execution Vulnerability (CNVD-2017-33180)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A remote code execution vulnerability exists in the database update feature in Circle with Disney version 2.0.1. The vulnerability can b...

ZeeBuddy SQL Injection Vulnerability

ZeeBuddy is a social networking system based on PHP and MySQL. A SQL injection vulnerability exists in ZeeBuddy version 2x. A remote attacker can exploit this vulnerability by sending the 'groupid' parameter to the admin/editadgroup.php file to inject SQL commands to access or modify database dat...

phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-32428)

phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...

XnView .dwg File Buffer Overflow Vulnerability

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.43 of XnView Classic for...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-32299)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.43 of XnView Classic for...