CVE-2017-15934

Artica Pandora FMS version 7.0 is vulnerable to stored Cross-Site Scripting in the map name parameter...

Unspecified Vulnerability in Oracle iPlanet Web Server (CNVD-2017-33734)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, etc. Oracle iPlanet Web Server is one of the Web servers designed specifically for medium and large enterpris...

Opentext Documentum Content Server File Download Vulnerability

OpenText Documentum Content Server formerly known as EMC Documentum Content Server is a content management service system from OpenText Canada. The system is mainly used to manage the Documentum content repository, you can create, modify and track documents and other operations. A file download...

HP Intelligent Management Center Arbitrary File Download Vulnerability (CNVD-2017-33197)

HP Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services, and users. imc SOM is one of the service operation and...

ImageMagick 'ReadYCBCRImage' function memory leak vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'ReadYCBCRImage' function in the coders/ycbcr.c file in ImageMagick version...

KMS is not Activating Windows on PVS 7.1

PVS: 7.1 : KMS is not activating Windows...

UBUNTU-CVE-2017-0810

A remote code execution vulnerability in the Android media framework libmpeg2. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38207066...

OpenText Documentum Administrator XML External Entity Injection Vulnerability

OpenText Documentum Administrator is Canada's OpenText company's Web-based set of development tools used to perform Documentum system management tasks. An XML external entity injection vulnerability exists in OpenText Documentum Administrator version 7.2.0180.0055. A remote attacker could use thi...

ImageMagick Denial of Service Vulnerability (CNVD-2017-31147)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'sixeldecode' function in the coders/sixel.c file in ImageMagick versi...

ImageMagick 'sixel_output_create' function denial of service vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A security vulnerability exists in the 'sixeloutputcreate' function in the coders/sixel.c file in ImageMagick version...

Sophos Astaro Security Gateway Remote Code Execution Vulnerability

The Sophos Astaro Security Gateway aka ASG is a gateway device from Sophos UK. A security vulnerability exists in Sophos ASG version 7. A remote attacker can exploit the vulnerability by sending a specially crafted request to the index.plx file to execute arbitrary code...

Drupal Open Redirect Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. An open redirection vulnerability exists in URL-related API functions in Drupal versions 6.x prior to 6.35 and 7.x prior to 7.35. A remote attacker can exploit this...

CVE-2017-1162

IBM QRadar 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 122957...

ImageMagick Denial of Service Vulnerability (CNVD-2017-26585)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A denial of service vulnerability exists in the ReadMPCImage of the coders/mpc.c file in ImageMagick version 7.0.6-8 Q16, which stems from the program failing to...

ImageMagick memory leak vulnerability (CNVD-2017-25388)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the ReadWEBPImage of the coders/webp.c file in ImageMagick version 7.0.6-5. An...

Heimdal capath policy protection mechanism bypass vulnerability

Heimdal is a Kerberos 5 implementation. A security vulnerability exists in the transit path validation code in versions of Heimdal prior to 7.3. An attacker can exploit this vulnerability to bypass the capath policy protection mechanism...

UBUNTU-CVE-2017-12875

The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service CPU consumption via a crafted file...

ImageMagick Denial of Service Vulnerability (CNVD-2017-236955)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'formatIPTC' function of the coders/meta.c file in ImageMagick version...

ImageMagick Denial of Service Vulnerability (CNVD-2017-236911)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'WritePCXImage' function of the coders/pcx.c file in ImageMagick versi...

NewSouth Innovations Kakadu SDK Buffer Overflow Vulnerability

NewSouth Innovations Kakadu SDK is a JPEG2000 software development kit from NewSouth Innovations, Australia. A buffer overflow vulnerability exists in version 7.9 of the NewSouth Innovations Kakadu SDK, which originates when the program fails to properly perform bounds detection on user-submitted...