CVE-2017-1665

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 133559...

Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2017-37109)

Microsoft .NET Core is a free open source development platform from Microsoft USA. The platform features multi-language support and cross-platform. A denial of service vulnerability exists in Microsoft .NET Core versions 1.0, 1.1, and 2.0 due to the program failing to properly parse certificate...

Ayukov NFTPD Buffer Overflow Vulnerability

Ayukov NFTPD is a file transfer protocol client. A buffer overflow vulnerability exists in Ayukov NFTPD 2.0 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary code...

CVE-2017-10344

Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications subcomponent: Import/Export. Supported versions that are affected are 2.8 and 2.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

MPFR 'strtofr.c' Buffer Overflow Vulnerability

MPFR is a free C library for high-precision floating-point operations. A buffer overflow vulnerability exists in MPFR versions 2.4 and 2.4.1, which arises from the program's failure to perform sufficient bounds checking on user-supplied input. An attacker could exploit this vulnerability to execu...

IPython Cross-Site Request Forgery Vulnerability

IPython is an enhanced version of Python's native interactive shell developed by the IPython team.The REST API is one of the APIs that supports lightweight REST-style web scripting. A cross-site request forgery vulnerability exists in the REST API in IPython versions 2 and 3. A remote attacker...

DEBIAN-CVE-2015-5607

Cross-site request forgery in the REST API in IPython 2 and 3...

RubyGems Secure Bypass Leakage (CNVD-2017-30738)

RubyGems is a Ruby package manager from the RubyGems organization, which is used to distribute and manage Ruby packages. A security vulnerability exists in RubyGems 2.6.12 and earlier versions. An attacker can exploit the vulnerability to inject malicious commands into a user's terminal and execu...

CloudBees Jenkins Pipeline: Groovy Plugin Remote Code Execution Vulnerability

CloudBees Jenkins Pipeline: Groovy Plugin is a U.S. CloudBees company's Java-based development of continuous integration tools in the process of building plug-ins . A remote code execution vulnerability exists in CloudBees Jenkins Pipeline: Groovy Plugin versions 2.36 and earlier. A remote attack...

Apache Struts Denial of Service Vulnerability (CNVD-2017-23348)

Apache Struts is the United States Apache Apache Software Foundation is responsible for maintaining an open source project , is a set of open source MVC framework for creating enterprise-class Java Web applications , mainly provides two versions of the framework products , Struts 1 and Struts 2...

Wireshark 'epan/dissectors/packet-rgmp.c' Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in the epan/dissectors/packet-rgmp.c file of th...

Wireshark NetScaler Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in the NetScaler file parser in Wireshark...

Google Android OS HTTP Header Injection Vulnerability

Android OS is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An HTTP header injection vulnerability exists in the URLConnection class in Android OS versions 2.2 through 6.0. A remote attacker can exploit the vulnerability to execute...

CVE-2017-6651

A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to access scheduled customer meetings. The vulnerability is due to an incomplete configuration of the robots.txt file on customer-hosted WebEx solutions and occur...

UBUNTU-CVE-2016-8642

In Moodle 2.x and 3.x, the question engine allows access to files that should not be available...

Apache Groovy Remote Code Execution Vulnerability

Apache Groovy is a JVM-based agile development language from the Apache Apache Software Foundation, which combines many of the powerful features of Python, Ruby and Smalltalk. A remote code execution vulnerability exists in Apache Groovy versions prior to 2.4.8. An attacker could exploit this...

Wireshark UMTS FP Parser Denial of Service Vulnerability (CNVD-2016-06208)

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability in the epan/dissectors/packet-umtsfp.c file in the UMTS FP pars...

appleple a-blog cms unauthorized operation vulnerability

appleple a-blog cms is a content management system CMS from appleple Japan. A security vulnerability exists in the session management of the comment feature in appleple a-blog cms 2.6.0.1 and earlier versions. A remote attacker can exploit this vulnerability to delete arbitrary comments or obtain...

Moodle Security Bypass Vulnerability (CNVD-2016-00395)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in Moodle versions 2.8 through 2.8.9. Due to the...

Cisco Virtual Topology System Denial of Service Vulnerability

Cisco Virtual Topology System VTS is the United States Cisco Cisco a set of standards-based, open for virtual and physical infrastructure for automated data center network structure configuration management and provisioning system. A security vulnerability exists in Cisco VTS versions 2.00 and...