Collaborate Disseminate
On Windows endpoints,the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint by causing the SecureConnector agent to execute arbitrary code. Continue reading VU#768331: ForeScout CounterACT SecureConnector agent is vulnerable to privilege escalation
The BSD libc library’s link_ntoa()function may be vulnerable to a classic buffer overflow. It is currently unclear if this issue is exploitable. Continue reading VU#548487: BSD libc contains a buffer overflow vulnerability in link_ntoa()
According to the reporter,the Sungard eTRAKiT3 software version 3.2.1.17 may be vulnerable to SQL injection which may allow a remote unauthenticated attacker to run a subset of SQL commands against the back-end database. Continue reading VU#846103: Sungard eTRAKiT3 may be vulnerable to SQL injection
Mozilla Firefox contains a use-after-free vulnerability in the SVG animation functionality,which may allow a remote,unauthenticated attacker to execute arbitrary code on a vulnerable system. Continue reading VU#791496: Mozilla Firefox SVG animation nsSMILTimeContainer use-after-free vulnerability
NTP.org ntpd prior to 4.2.8p9 contains multiple denial of service vulnerabilities. Continue reading VU#633847: NTP.org ntpd contains multiple denial of service vulnerabilities
Ragentek Android software contains an over-the-air update mechanism that communicates over an unencrypted channel,which can allow a remote attacker to execute arbitrary code with root privileges. Continue reading VU#624539: Ragentek Android OTA update mechanism vulnerable to MITM attack
Ragentek Android software contains an over-the-air update mechanism that communicates over an unencrypted channel,which can allow a remote attacker to execute arbitrary code with root privileges. Continue reading VU#624539: Ragentek Android OTA update mechanism vulnerable to MITM attack
The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 may execute code from an uploaded malicious file. Continue reading VU#346175: Imagely NextGen Gallery plugin for WordPress contains a local file inclusion vulnerability
The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 may execute code from an uploaded malicious file. Continue reading VU#346175: Imagely NextGen Gallery plugin for WordPress contains a local file inclusion vulnerability
D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login action. Continue reading VU#677427: D-Link routers HNAP service contains stack-based buffer overflow