Collaborate Disseminate
Little CMS 2 contains a double-free vulnerability in the DefaultICCintents function,which may allow a remote,unauthenticated attacker to execute arbitrary code on a vulnerable system. Continue reading VU#369800: Little CMS 2 DefaultICCintents double-free vulnerability
ImageMagick does not properly validate user input before processing it using a delegate,which may lead to arbitrary code execution. This issue is also known as"ImageTragick". Continue reading VU#250519: ImageMagick does not properly validate input before processing images using a delegate
An attacker may be able to coerce a user into executing arbitrary code in the context of the current user by attempting to unzip a crafted zip file provided by the attacker. Continue reading VU#862384: libarchive contains a heap-based buffer overflow due to improper input validation
The Accellion File Transfer Appliance(FTA)contains multiple vulnerabilites that can allow a remote,unauthenticated attacker to execute arbitrary code on a vulnerable system. Continue reading VU#505560: Accellion File Transfer Appliance (FTA) contains multiple vulnerabilities
The NTP.org reference implementation of ntpd contains multiple vulnerabilities. Continue reading VU#718152: NTP.org ntpd contains multiple vulnerabilities
Allround Automations PL/SQL Developer version 11 checks for updates over HTTP and does not verify updates before executing commands,which may allow an attacker to execute arbitrary code. Continue reading VU#229047: Allround Automations PL/SQL Developer v11 performs updates over HTTP
The SysLINK SL-1000 M2M(Machine-to-Machine)Modular Gateway contains multiple vulnerabilities. Continue reading VU#822980: SysLINK M2M Modular Gateway contains multiple vulnerabilities
The HP Data Protector does not perform user authentication,even when Encrypted Control Communications is enabled,and contains an embedded SSL private key that is shared among all installations. Continue reading VU#267328: HP Data Protector does not perform authentication and contains an embedded SSL private key
The Security Account Manager Remote(SAMR)and Local Security Authority(Domain Policy)(LSAD)protocols do not properly establish Remote Procedure Call(RPC)channels,which may allow any attacker to impersonate an authenticated user or gain access to the SAM database,or launch denial of service attacks. This vulnerability is also known publicly as"Badlock". Continue reading VU#813296: Microsoft Windows and Samba may allow spoofing of authenticated users ("Badlock")
The Lemur Vehicle Monitors BlueDriver is an aftermarket automotive device that connects to a vehicle’s OBD-II port and provides information about the vehicle’s performance. The BlueDriver does not require a PIN for Bluetooth access,which allows anyone in range to send arbitrary commands to the vehicle’s CAN bus. Continue reading VU#615456: Lemur Vehicle Monitors BlueDriver LSB2 does not authenticate users for Bluetooth access