Juniper Networks NorthStar Controller Application Remote Elevation of Privilege Vulnerability (CNVD-2017-07238)

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. A remote elevation of privilege vulnerability exists in Juniper Networks...

The vulnerability of the NFSv2 and NFSv3 server implementations in the Linux operating system allows a hacker to trigger arithmetic pointer errors or exert other types of influence.

The vulnerability of NFSv2 and NFSv3 implementations in the Linux operating system’s kernel is related to integer overflows. Exploiting this vulnerability allows a malicious actor to execute arithmetic instructions with errors or to perform other actions using specially crafted requests related t...

Unspecified vulnerability in Moodle (CNVD-2017-06924)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. There is a security vulnerability in Moodle versions 2.x and 3.x. A remote attacker...

Unspecified Vulnerability in Moodle

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in Moodle versions 2.x and 3.x. The vulnerability stem...

Moodle Cross-Site Request Forgery Vulnerability (CNVD-2017-06926)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site request forgery vulnerability exists in Moodle version 2.x and version 3....

Trend Micro Threat Discovery Appliance Arbitrary Code Execution Vulnerability (CNVD-2017-06832)

The Trend Micro Threat Discovery Appliance TDA is a threat discovery appliance with integrated cloud security technology from Trend Micro. The appliance provides detection of malicious activity at the network layer, threat management services, and threat analysis and reporting. A security...

Linux kernel NFSv2 and NFSv3 server security bypass vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the U.S. NFSv2 and NFSv3 servers are among the server sides. A security bypass vulnerability exists in the NFSv2 and NFSv3 servers in Linux kernel versions 4.10.13 and earlier. A remote attacker...

DEBIAN-CVE-2017-8364

The readbuf function in stream.c in rzip 2.1 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted archive...

DEBIAN-CVE-2017-7895

The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possibly have unspecified other impact via crafted requests, related to fs/nfsd/nfs3xdr.c and...

MODX Revolution Directory Traversal Vulnerability (CNVD-2017-06899)

MODX Revolution is a PHP-based open source content management system CMS from the U.S. company MODX. The system supports online collaboration, search engine optimization SEO, add-ons and more. A directory traversal vulnerability exists in MODX Revolution version 2.5.7. The vulnerability arises du...

Apache Hadoop Input Validation Vulnerability

Hadoop is an open source parallel computing programming tool and decentralized archive system developed by the Apache Software Foundation. A security vulnerability exists in Apache Hadoop 2.6.x and earlier versions. An attacker can exploit this vulnerability by submitting malicious input to bypas...

Linux kernel information disclosure vulnerability (CNVD-2017-06740)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. The driver /media/video/videobuf-vmalloc.c does not initialize the videobufmapping data structure in Linux kernels prior to 2.6.24 An information disclosure vulnerability...

Red Hat OpenShift Enterprise Information Disclosure Vulnerability

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that builds, tests, deploys, and runs applications.OpenShift Enterprise is an open source version of the private cloud. An information disclosure vulnerability exists in Red Hat OpenShift Enterprise...

PT-2017-1997 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.10.13 Description: The issue is related to an integer overflow in the NFSv2 and NFSv3 server implementations. It may allow a remote attacker to trigger pointer-arithmetic errors or have other unspecified impac...

UBUNTU-CVE-2017-3590

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/Python. Supported versions that are affected are 2.1.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to...

CVE-2017-2333

A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious, network-based, authenticated attacker to consume enough system resources to cause a persistent denial of service by visiting certain...

MantisBT 'Timeline include' page cross-site scripting vulnerability

MantisBT is a Web-based open source defect tracking system of the MantisBT team . The system provides project management and defect tracking services in the form of Web operations. A cross-site scripting vulnerability exists in the Timeline include page used in the My View myviewpage.php and User...

DEBIAN-CVE-2017-7645

The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service system crash via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c...

ALPINE-CVE-2017-7614

elflink.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...

PT-2017-17835 · Fraunhofer Iis · He-Aac+ Codec

Name of the Vulnerable Software and Affected Versions: HE-AAC+ Codec aka libaacplus version 2.0.2 Description: The issue is related to a left-shift undefined behavior in the au channel.h file, which could allow remote attackers to cause a denial of service, potentially leading to an application...