漏洞类别：Local 漏洞等级： 漏洞信息 IBM Tivoli Monitoring automates monitoring of essential system resources to detect bottlenecks and potential problems. There are several vulnerabilities in IBM SDK Java Technology Edition that is shipped as part of multiple IBM Tivoli Mon…

漏洞类别：Hardware 漏洞等级： 漏洞信息 Realtek provides Full Range of Connectivity, Multimedia, and Consumer Electronics Solutions. Realtek SDK Miniigd UPnP SOAP Command Execution. Different devices using the Realtek SDK with the miniigd daemon are vulnerable to OS command …

漏洞类别：RedHat 漏洞等级： 漏洞信息 Chromium is an open-source web browser, powered by WebKit (Blink). A flaw was found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or disclose se…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for samba to fix the vulnerability. Affected OS: Fedora 26 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Fedora has issued updated packages to fix this vulnerability. For …

漏洞类别：Local 漏洞等级： 漏洞信息 Google Chrome is a web browser for multiple platforms developed by Google. This Google Chrome update fixes the following vulnerability: CVE-2017-15429: UXSS in V8 Affected Versions: Google Chrome prior to 63.0.3239.108 QID Detection Logic…

漏洞类别：Local 漏洞等级： 漏洞信息 Cisco Jabber for Windows is a unified communications client within the Cisco Jabber suite of collaboration software. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. Affecte…

漏洞类别：CGI 漏洞等级： 漏洞信息 McAfee Web Gateway Anti-Malware Engine, part of McAfee Web Protection, is a powerful in-line technology designed to protect against contemporary threats delivered via HTTP and HTTPS channels, taking web exploit detection, zero-day, and targ…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for imagemagick to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for imagemagick to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 漏洞危害 This vulnerability could be exploited to gain p…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for openssl to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP3 SU…

漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 A flaw was found in the patches used to fix the 'dirtycow' vulnerability (CVE-2016-5195 ). An attacker, able to run local code, can exploit a race condition in transparent huge pages to modify usually read-only huge pages. (CVE-201…

漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 It was discovered that the Security component of OpenJDK could fail to properly enforce restrictions defined for processing of X.509 certificate chains. A remote attacker could possibly use this flaw to make Java accept certificate…

漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 Unsanitized input when searching in local cache database It was found that sssd's sysdb_search_user_by_upn_res() function did not sanitize requests when querying its local cache and was vulnerable to injection. In a centralized log…

漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 Quick Emulator (QEMU), compiled with the PC System Emulator with multiboot feature support, is vulnerable to an OOB r/w memory access issue. The issue could occur due to an integer overflow while loading a kernel image during a gue…

漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 Use-after-free in processing SMB1 requests A use-after-free flaw was found in the way samba servers handled certain SMB1 requests. An unauthenticated attacker could send specially-crafted SMB1 requests to cause the server to crash …

漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 Use-after-free in receive_msg function via vectors involving BDAT commands The receive_msg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to execute arbitrary code or cause a denial of servic…

漏洞类别：Local 漏洞等级： 漏洞信息 A potential security vulnerability has been identified with certain versions of Synaptics touchpad drivers that impacts all Synaptics OEM partners. An attacker would need administrative privileges in order to take advantage of the vulnera…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for evince to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP3 SUS…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for java-1_8_0-ibm to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12…

漏洞类别：CGI 漏洞等级： 漏洞信息 Advantech/BroadWin WebAccess is a web-based application for human-machine interfaces (HMI), and supervisory control and data acquisition (SCADA). Advantech/BroadWin WebAccess is exposed to multiple vulnerabilities that can cause Cross-site …

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for the linux kernel to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP3 SUSE Linux Enterprise Desktop 12-SP3 漏洞危害 This …

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for libraw to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Desktop 12-SP3 SU…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for postgresql96 to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-S…

漏洞类别：Cisco 漏洞等级： 漏洞信息 A vulnerability in the TLS protocol implementation of legacy Cisco ASA devices could allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to improper implementation of countermeasures against…

漏洞类别：Local 漏洞等级： 漏洞信息 FortiClient is a comprehensive endpoint security solution. An Information Disclosure vulnerability has been identified in FortiClient which reveals VPN credentials. Affected Versions: FortiClient version 5.6.0 and earlier QID Detection Lo…