漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that GnuTLS incorrectly handled certain assignments files. 漏洞危害 If a user were tricked into processing a specially crafted assignments file, a remote attacker could possibly execute arbirary code. 解决方案 Refer to Ubuntu a…

漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that Puppet incorrectly handled the search path. It was discovered that Puppet incorrectly handled YAML deserialization. 漏洞危害 A local attacker could use this issue to possibly execute arbitrary code. (CVE-2014-3248) A r…

漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that OpenLDAP incorrectly handled certain search requests. 漏洞危害 A remote attacker could use this issue to cause slapd to crash, resulting in a denial of service. 解决方案 Refer to Ubuntu advisory USN-3307-1 for affected pac…

漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that libsndfile incorrectly handled certain malformed files. 漏洞危害 A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code. 解决方案 Refer to …

漏洞类别：Ubuntu 漏洞等级： 漏洞信息 It was discovered that the NVIDIA graphics drivers contained flaws in the kernel mode layer. 漏洞危害 A local attacker could use these issues to cause a denial of service or potentially escalate their privileges on the system. 解决方案 Refer to …

漏洞类别：Debian 漏洞等级： 漏洞信息 Debian has released security update for perl to fix the vulnerabilities. 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Refer to Debian security advisory DSA 3873-1 to address this issue and obtain further de…

漏洞类别：Debian 漏洞等级： 漏洞信息 Debian has released security update for nss to fix the vulnerabilities. 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use this vulnerability to change partial conte…

漏洞类别：Debian 漏洞等级： 漏洞信息 Debian has released security update for zookeeper to fix the vulnerabilities. 漏洞危害 Successful exploitation of the vulnerability cause denial of service attacks. 解决方案 Refer to Debian security advisory DSA 3871-1 to address this issue and …

漏洞类别：RedHat 漏洞等级： 漏洞信息 Chromium is an open-source web browser, powered by WebKit (Blink). Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Chromium to crash, execute arbitrary code, or di…

漏洞类别：RedHat 漏洞等级： 漏洞信息 Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information. A remote…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for imagemagick to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Desktop 12-SP2 漏洞危害 This vulne…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for libnettle to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Desktop 12-SP2 漏洞危害 This vulnera…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for strongswan to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Server 11-SP4 漏洞危害 This vulnerability can be used to cause a complete denial of service and could render the resource com…

漏洞类别：SUSE 漏洞等级： 漏洞信息 SUSE has released security update for libtirpc, rpcbind to fix the vulnerabilities. Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 漏洞危害 This vulnerability can be used to cause a…

漏洞类别：OEL 漏洞等级： 漏洞信息 Oracle Enterprise Linux has released security update for sudo to fix the vulnerabilities. Affected Products: Oracle Linux 5 漏洞危害 A local attacker in some configurations could possibly use this to overwrite any file on the filesystem, bypass…

漏洞类别：Local 漏洞等级： 漏洞信息 IBM Domino (formerly IBM Lotus Domino) is an advanced platform for hosting social business applications. IBM Domino is vulnerable to a information disclosure vulnerability which allows an attacker to steal credentials with the help of usi…

漏洞类别：Local 漏洞等级： 漏洞信息 Google Chrome is a web browser for multiple platforms developed by Google. This Google Chrome update fixes the following vulnerabilities: CVE-2017-5070 Type confusion in V8. CVE-2017-5071 Out of bounds read in V8. CVE-2017-5072 Address sp…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for dropbear to fix the vulnerability. Affected OS: Fedora 24 Fedora 25 漏洞危害 This vulnerability could be exploited to gain complete access to sensitive information. Malicious users could also use this …

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for libtasn1 to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use this vulnerabili…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for poppler to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Fedora has issued updated packages to fix this vulnerability. Up…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for wget to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 Malicious users could use this vulnerability to change partial contents or configuration on the system. 解决方案 Fedora has issued updated pac…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for sudo to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 A local attacker in some configurations could possibly use this to overwrite any file on the filesystem, bypassing intended permissions. 解…

漏洞类别：Local 漏洞等级： 漏洞信息 IBM MQ is a message oriented middleware that allows independent and non-concurrent applications on a distributed system to communicate with each other. IBM MQ is vulnerable to multiple vulnerabilities in glibc which can allow a remote att…

漏洞类别：Local 漏洞等级： 漏洞信息 InduSoft Web Studio is a powerful collection of automation tools that provide all the automation building blocks to develop HMIs, SCADA systems and embedded instrumentation solutions. An incorrect default permissions issue was discovered …

漏洞类别：Information gathering 漏洞等级： 漏洞信息 McAfee Data Loss Prevention (DLP) Endpoint safeguards intellectual property and ensures compliance by protecting sensitive data on endpoint systems. The target does not have McAfee Data Loss Prevention Endpoint Agent insta…