CVE-2017-0829

An elevation of privilege vulnerability in the Motorola bootloader. Product: Android. Versions: Android kernel. Android ID: A-62345044...

CVE-2017-8759

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."...

Shopware 5.2.5 & v5.3 - Multiple Cross Site Vulnerabilities

Document Title: =============== Shopware 5.2.5 & v5.3 - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1922 Shopware Security Tracking ID: SW-19834 Security Update:...

Security Advisory - Two Command Injection Vulnerabilities in The FusionSphere OpenStack

The FusionSphere has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands. Vulnerability ID: HWPSIRT-2017-05142 and HWPSIRT-2017-05143 The tw...

Drupal Views access bypass vulnerability (CNVD-2017-221665)

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Views is one of the view components. An access bypass vulnerability exists in Drupal Views versions prior to 7.x-3.17. An attacker can exploit this vulnerability to bypass security...

ansible: Arbitrary code execution on control node (incomplete fix for CVE-2016-9587)

An input validation vulnerability was found in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could use this flaw to execute arbitrary code on the Ansible server...

Security Advisory - Four Command Injection Vulnerabilities in The FusionSphere OpenStack

The FusionSphere OpenStack has four command injection vulnerabilities due to the insufficient input validation on four TCP listening ports. An unauthenticated attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands. Vulnerability ID:...

CVE-2016-7670

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

CVE-2014-8222

CVE-2014-8222 is rejected/not used; this ID does not represent an active vulnerability entry.

Kernel security update: Virtuozzo ReadyKernel patch 15.0 for kernels 3.10.0-327.18.2.vz7.15.2 (Virtuozzo 7.0.0), 3.10.0-327.36.1.vz7.18.7 (Virtuozzo 7.0.1), and 3.10.0-327.36.1.vz7.20.18 (Virtuozzo 7.0.3)

The cumulative Virtuozzo ReadyKernel patch updated with a security fix. The patch applies to Virtuozzo versions 7.0.0, 7.0.1, and 7.0.3. Vulnerability id: CVE-2017-2647 A flaw was discovered in the Linux kernel's key subsystem. Invoking the requestkey system call with a specially crafted set of...

Google Android libgdx remote code execution vulnerability (CNVD-2017-03885)

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android libgdx. An attacker can execute arbitrary code in the process context via a constructed file...

Security Advisory - DoS Vulnerability in Multiple Huawei Products

There is an denial of service DoS vulnerability in multiple Huawei products. An attacker with specific permission can craft a file containing malicious data and upload it to the device to exhaust memory, causing a DoS condition. Vulnerability ID: HWPSIRT-2016-07088 This vulnerability has been...

ImageMagick Buffer Overflow Vulnerability (CNVD-2017-00194)

ImageMagick is a free software for creating, editing, and compositing images.The use of most of ImageMagick's features comes from the command line tools. ImageMagick suffers from a buffer overflow vulnerability that originates from a failure to perform adequate boundary checking when copying user...

Tenda/Dlink/Tplink TD-W8961ND - 'DHCP' Cross-Site Scripting

Document Title: =============== Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1990 Release Date: ============= 2016-11-28 Vulnerability Laboratory ID VL-ID: ====================================...

EditMe CMS - Cross-Site Request Forgery (Add Admin)

EditMe CMS - Cross-Site Request Forgery Add Admin Document Title: =============== EditMe CMS - CSRF Privilege Escalate Web Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1996 Release Date: ============= 2016-11-14 Vulnerability Laboratory...

Google Chrome Security Bypass Vulnerability (CNVD-2016-10733)

Google Chrome is a popular web browser. A security bypass vulnerability exists in Google Chrome. An attacker can exploit the vulnerability to obtain a bypass of certain security restrictions and perform unauthorized actions...

Intel(R) HD Graphics 10 - Path Privilege Escalation

Document Title: =============== IntelR HD Graphics 10 - Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1981 Release Date: ============= 2016-11-02 Vulnerability Laboratory ID VL-ID: ==================================== 1981...

Microsoft Windows Kernel Local Mobilization Vulnerability (CNVD-2016-09376)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. A local elevation of privilege vulnerability exists in the kernel in Microsoft Windows, which arises from a failure of the kernel API to properly restrict acces...

Security Advisory - Path Traversal Vulnerability in Multiple Huawei Products

Multiple Huawei products have a path traversal vulnerability. Due to the insufficient path validation, an authenticated attacker may exploit this vulnerability to download some files without authorization, causing information leak. Vulnerability ID: HWPSIRT-2016-07025 This vulnerability has been...

NUUO NVRmini 2 3.0.8 - Multiple OS Command Injections

NUUO Multiple OS Command Injection Vulnerabilities Vendor: NUUO Inc. Product web page: http://www.nuuo.com Affected version: =3.0.8 NE-4160, NT-4040, NT-4040R DP: =04.07.0000.0030, =04.03.0000.0035 FW: =02.02.00, =1.7.0 Summary: NUUO NVRmini 2 is the lightweight, portable NVR solution with NAS...