Google Android has an unspecified vulnerability (CNVD-2017-22586)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Google Android has unspecified vulnerabilities. No detailed vulnerability details are provided at this time...

Google Android media framework denial of service vulnerability (CNVD-2017-15982)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media framework in Android. A remote attacker can exploit this...

Dreamline MONXIN has multiple XSS vulnerabilities

Monxin multi-store home mall system is a by Monxin technology to create a PC mall, mobile mall, micro letter mall, offline cash register system. There are multiple XSS vulnerabilities in Monxin. An attacker can exploit this vulnerability to obtain sensitive database information...

Hopesys Web Management System version 1.0 /include/func.common.php referer header injection vulnerability

Hopesys website management system is based on LAMP development of enterprise/government website management system. Hopesys Website Management System version 1.0 /include/func.common.php referer header injection vulnerability. An attacker can use this vulnerability to obtain sensitive database...

Huawei Vicky-AL00A and Victoria-AL00A cell phones isub denial of service vulnerability

The Huawei Vicky-AL00A and Victoria-AL00A are both smartphone devices from the Chinese company Huawei Huawei. A denial of service vulnerability exists in the lsub service in the Huawei Vicky-AL00A Vicky-AL00AC00B157 prior and Victoria-VL00A Victoria-VL00AC00B157 prior, which stems from a program...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-12105)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security bypass vulnerability exists in Microsoft Edge. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized...

Broadcom BCM43xx Wi-Fi chips arbitrary code execution vulnerability

The Broadcom BCM43xx Wi-Fi chips are a combo chip for use in 5G Wi-Fi. A security vulnerability exists in the Broadcom BCM43xx Wi-Fi chips that allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code...

Net Monitor For Employees Pro Privilege Escalation

Exploit Title: Unquoted Service Path Privilege Escalation - Net Monitor for Employees Pro gmail.com, saeid Nsecurity.org Linkedin: https://www.linkedin.com/in/saeidatabaki Vendor Homepage: http://networklookout.com/ Version: sc qc "Net Monitor for Employees Agent" SC QueryServiceConfig SUCCESS...

Octopus Deploy Authentication Code Execution Vulnerability

Octopus is a deployment tool for .NET automation. An authentication code execution vulnerability exists in Octopus Deploy. Arbitrary code execution occurs due to poor filtering of the program during the authentication process...

Vanno CMS latest version exists to bypass the change of administrative password vulnerability

Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. Vanno CMS latest version exists to bypass the change admin password vulnerability. Attackers can use this vulnerability to change cookies to enter the background to change the...

Linux kernel local denial of service vulnerability (CNVD-2017-09899)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux kernel suffers from a local denial of service vulnerability. A local attacker could exploit this vulnerability to cause a denial of service...

Dahua Digital Video Recorder and IP Camera Configuration File Password Vulnerability

Dahua DH-IPC-HDBW23A0RN-ZS and others are camera products from DaHua China. A profile password vulnerability exists in a variety of DaHua digital video recorders and IP cameras, which can be exploited by an attacker to impersonate a privileged user and gain access to sensitive information...

Samsung SM-G920F SecEmailSync SQL Injection Vulnerability

The Samsung SM-G920F Galaxy S6 is a smartphone from the South Korean company Samsung.SecEmailSync is one of the email synchronization plugins available. An SQL injection vulnerability exists in the SecEmailSync plugin in the Samsung SM-G920F build G920FXXU2COH2 version. A remote attacker can...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-06319)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to execute arbitrary code to compromise an affected system...

Avast Antivirus Security Bypass Vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in Avast Antivirus version 17. The vulnerability can be exploited by an attacker to bypass the Self-Defense feature...

libmad -- multiple vulnerabilities

National Vulnerability Database: CVE-2017-8372: The madlayerIII function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted audio file. CVE-2017-8373: The madlayerIII function ...

GnuTLS has multiple vulnerabilities

GnuTLS is a free secure communications library for implementing the SSL, TLS and DTLS protocols developed by Nikos Mavrogiannopoulos of Belgium and Simon Josefsson of Sweden, software developers. A security vulnerability exists in the 'cdkpktread' function in the opencdk/read-packet.c file in...

Linux kernel crypto/ahash.c denial of service vulnerability

Linux kernel is an open source operating system. Linux kernel has a security vulnerability in the crypto/ahash.c file. An attacker can exploit the vulnerability to submit a special request to crash the system...

Adobe Acrobat and Reader Remote Code Execution Vulnerability (CNVD-2017-04980)

Adobe Acrobat and Reader is the United States Adobe developed a portable document format can be used to publish all the documents of the editing software. A remote code execution vulnerability exists in Adobe Acrobat and Reader. An attacker could use this vulnerability to compromise an affected...

Adobe Photoshop CC Local Privilege Escalation Vulnerability

Adobe Photoshop PS CC is the latest set of image processing and drawing software from the American company Audobee Adobe. A security vulnerability exists in Adobe PS CC. The vulnerability can be exploited by an attacker to gain privileges...