MyYLC Integer Overflow Vulnerability

MyYLC is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function in MyYLC's smart contract implementation. An attacker could use this vulnerability to prevent the seller from obtaining the assets due to the exchange...

Siemens SICLOCK TC Product Information Disclosure Vulnerability

The SICROCK product line offers components for synchronizing plant and system time. An information disclosure vulnerability exists in Siemens SICLOCK TC products. An attacker could exploit the vulnerability to read the access password of the device...

Potential security vulnerability with IBM WebSphere Application Server

Abstract Security Bulletin: Asset and Service Management Products - Potential security exposure with IBM WebSphere application server after installing fix for APAR PM44303 CVE-2012-3325 Content VULNERABILITY DETAILS: CVE ID: CVE-2012-3325 DESCRIPTION: Customers that have installed a Websphere...

Adobe Flash Stack Buffer Overflow Vulnerability

Adobe Flash Player is a widely used, proprietary multimedia program player originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A stack buffer overflow vulnerability exists in Adobe Flash Player 29.0.0.171 and earlier...

Enserver Directory Traversal Vulnerability

enserver is a web server. A directory traversal vulnerability exists in enserver. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

jadedown denial of service vulnerability

jadedown is a package used in Ndoe.js. A security vulnerability exists in jadedown. An attacker can exploit this vulnerability by passing in certain types of user input to cause a denial of service...

CalAmp lenderoutlook on colt.calamp-ts.com incorrect privilege assignment vulnerability

Calamp is a pioneer in M2M telematics, managing over 1.5M IoT devices. An incorrect privilege assignment vulnerability exists in CalAmp lenderoutlook on colt.calamp-ts.com. An attacker could exploit the vulnerability to obtain sensitive data...

Command Execution Vulnerabilities in Cicada Knowledge Enterprise Portal System V7.0.1 Backend Templates

Cicada Knowledge Enterprise Portal System is an open source and free enterprise portal system. Cicada Knowledge Enterprise Portal System V7.0.1 command execution vulnerability exists in the background template. An attacker can exploit the vulnerability to gain server privileges...

Foxit Reader Information Disclosure Vulnerability (CNVD-2018-10940)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An information disclosure vulnerability exists in the parsing of the U3D Model Node framework in Foxit Reader version 9.0.0.29935, which occurs when the program fails to properly validate user-submitted data. The...

DeviceLock Plug And Play Auditor 5.72 Buffer Overflow

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/DEVICELOCK-PLUG-PLAY-AUDITOR-v5.72-UNICODE-BUFFER-OVERFLOW.txt + ISR: Apparition Security Vendor: ======== https://www.devicelock.com/freeware.html/ Product: ======== DeviceLock Plug and...

Google Android has an unspecified vulnerability (CNVD-2018-10037)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9625 and other central processing unit CPU products from Qualcomm are used in different platforms. A security vulnerability exists in the Qualcomm...

Google Android has an unspecified vulnerability (CNVD-2018-10122)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9206 and other central processing unit CPU products from Qualcomm are used in different platforms. A security vulnerability exists in the Qualcomm...

CVE-2018-9857

creationtimestamp| type| source ---|---|--- 2018-04-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44486...

Override Access Vulnerability in DCMS Upload Management Page

Xiamen Sanwu Internet Technology Co., Ltd. is China's first "cloud computing"-based enterprise informatization services listed on the Growth Enterprise Market GEM. An unauthorized access vulnerability exists in the DCMS upload management page. An attacker can exploit the vulnerability to gain...

Microsoft Excel and Office Remote Code Execution Vulnerability

Microsoft Excel is one of the components of Microsoft's office software Microsoft office, a spreadsheet software written and run by Microsoft for computers with Windows and Apple Macintosh operating systems. A remote code execution vulnerability exists in Microsoft Excel and Office. The...

Netwide Assembler Stack Buffer Overflow Vulnerability

Netwide Assembler NASM is a portable, modular 80x86 and x86-64 assembler. A stack buffer overflow vulnerability exists in the ieeeshr function in asm/float.c in Netwide Assembler NASM 2.13.02rc2, for which there is currently no detailed vulnerability description...

Denial of service vulnerability in 2345 Security Guard driver file 2345Wrath.sys

2345 Security Guard is a computer security management software that integrates computer checkup, Trojan horse detection and killing, garbage cleaning, repairing system vulnerabilities, system acceleration, software management and other functions under the banner of Shanghai 2,3,4,5 Network...

CVE-2018-8740

In SQLite through 3.22.0, databases whose schema is corrupted using a CREATE TABLE AS statement could cause a NULL pointer dereference, related to build.c and prepare.c...

Override access vulnerability in Spike's web version

Nail is a free multi-end platform for communication and collaboration created by Alibaba Group specifically for Chinese enterprises. Nail web version of the existence of bulk user override access vulnerability, an attacker can exploit the vulnerability bulk traversal of hundreds of millions of ui...

Trend Micro Control Manager SQL Injection Remote Code Execution Vulnerability (CNVD-2018-03780)

Trend Micro Control Manager provides forward-looking, comprehensive threat protection with centralized management for security updates, patch deployment, coordinated response, and remote management capabilities that support Trend Micro products and services. A GetXXX method SQL injection remote...