漏洞类别：RedHat 漏洞等级： 漏洞信息 OpenLDAP is an open-source suite of Lightweight Directory Access Protocol (LDAP) applications and development tools. A double-free flaw was found in the way OpenLDAP's slapd server using the MDB backend handled LDAP searches. A remote at…

漏洞类别：Local 漏洞等级： 漏洞信息 TIBCO Spotfire is an analytics and business intelligence platform for analysis of data by predictive and complex statistics. TIBCO Spotfire Server contains multiple vulnerabilities which allows authorized users to perform SQL injection at…

漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 A vulnerability was reported in the CloudFormation bootstrap tools that allows an attacker to execute arbitrary code as root if they have local access to the system and are able to create files in a specific directory (CVE-2017-945…

漏洞类别：Amazon Linux 漏洞等级： 漏洞信息 Incorrect enforcement of certificate path restrictions: It was discovered that the Security component of OpenJDK could fail to properly enforce restrictions defined for processing of X.509 certificate chains. A remote attacker coul…

漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that FreeRADIUS incorrectly handled memory when decoding packets. 漏洞危害 A remote attacker could use this issue to cause FreeRADIUS to crash or hang, resulting in a denial of service, or possibly execute arbitrary code. 解…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for poppler to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP3 SU…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for poppler to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Desktop 12-SP2 漏洞危害 This vulnerabi…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for apache2 to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 漏洞危害 This vulnerability could be exploited to gain parti…

漏洞类别：Debian 漏洞等级： 漏洞信息 Debian has released security update for openjdk-8 to fix the vulnerabilities. 漏洞危害 Successful exploitation of the vulnerability will lead to sandbox bypass,use of insecure cryptography, side channel attacks, information disclosure, the e…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for libical to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP3 SU…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for libquicktime to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive informat…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for libquicktime to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP3 SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-S…

漏洞类别：Web server 漏洞等级： 漏洞信息 Boa is a single-tasking, high-performance Web server for Unix-based systems. The vulnerability allows the injection of "../.." using the FILECAMERA variable sent by GET to read files with root privileges. Affected version: BOA Webser…

漏洞类别：Cisco 漏洞等级： 漏洞信息 A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to access the Autonomic Networking infrastructure of an affected system, after the certificate for the aut…

漏洞类别：Cisco 漏洞等级： 漏洞信息 A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to reset the Autonomic Control Plane (ACP) of an affected system and view ACP packets th…

漏洞类别：Cisco 漏洞等级： 漏洞信息 A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of servi…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for qemu to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 This vulnerability can also be used to cause a limited denial of service in the form of interruptions in resource availability. 解决方案 Fedor…

漏洞类别：Local 漏洞等级： 漏洞信息 IBM WebSphere Application Server is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.. There is a potential cross-site req…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for heimdal to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use this vulnerabilit…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for kernel to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 This vulnerability could be exploited to gain complete access to sensitive information. Malicious users could also use this vulnerabilit…

漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that the Linux kernel did not properly initialize a Wake- on-Lan data structure. A race condition in the Advanced Linux Sound Architecture (ALSA) subsystem in the Linux kernel. It was discovered that the DRM driver for …

漏洞类别：Web server 漏洞等级： 漏洞信息 Apache HTTP Server is an HTTP web server application. Apache HTTP Server is exposed to following vulnerabilities: - Apache HTTP Request Parsing Whitespace Defects (CVE-2016-8743). - HTTP/2 CONTINUATION denial of service (CVE-2016-874…

漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that the Apache HTTP Server mod_auth_digest module incorrectly cleared values when processing certain requests. 漏洞危害 A remote attacker could use this issue to cause the server to crash, resulting in a denial or service,…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for libreoffice to fix the vulnerabilities. Affected Products: openSUSE Leap 42.2 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use …

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for systemd to fix the vulnerabilities. Affected Products: openSUSE Leap 42.2 漏洞危害 This vulnerability can also be used to cause a limited denial of service in the form of interruptions in resource availabi…