4066 matches found
CVE-2017-5709
CVE-2017-5709 corresponds to privilege-escalation flaws in Intel Server Platform Services Firmware 4.0. The Intel SPS kernel code could allow an unauthorized local process to access privileged content via an unspecified vector. The Huawei and CNVD entries confirm the same issue; MITRE/Intel advis...
CVE-2017-1364
IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126857...
Cross site scripting
IBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 125975...
CVE-2017-1324
Summary: IBM RELM (Rational Engineering Lifecycle Manager) versions 4.0.3–4.0.7, 5.0–5.0.2, and 6.0–6.0.4 are affected by a cross-site scripting (XSS) vulnerability in the Web UI that can lead to credentials disclosure in a trusted session. Root cause: Web UI input handling allows injection of ar...
CVE-2017-1369
IBM RELM (Rational Engineering Lifecycle Manager) versions 4.0.3–6.0.4 are affected by a cross-site scripting (XSS) vulnerability in the Web UI that can lead to credentials disclosure within a trusted session. The issue stems from embedded arbitrary JavaScript in the UI, as described across multi...
beescms4. 0 an arbitrary file upload vulnerability
No description provided by source...
beescms4.0两处 sql注入漏洞
No description provided by source...
CVE-2015-1445
HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30...
CVE-2015-1445
HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30...
Easy Web Search 4.0 - SQL Injection
Exploit Title: Easy Web Search 4.0 - SQL Injection Dork: N/A Date: 28.08.2017 Vendor Homepage: http://nelliwinne.net/ Software Link: https://codecanyon.net/item/easy-web-search-php-search-engine-with-image-search-and-crawling-system/17574164 Demo: http://codecanyon.nelliwinne.net/EasyWebSearch/...
phpMyAdmin Multiple XSS Vulnerabilities (PMASA-2014-8) - Linux
phpMyAdmin is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2017-1338
CVE-2017-1338 affects IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0, with a cross-site scripting flaw in the Web UI that can let an attacker embed arbitrary JavaScript and potentially disclose credentials in a trusted session. The IBM bulletin lists fixes by upgrading to: 6.0.2 iFix013 or ...
phpMyAdmin Multiple Cross-Site Scripting Vulnerabilities (Jul 2014) - Linux
phpMyAdmin is prone to multiple cross-site scripting vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
JVN#53292345: Teikihoukokusho Sakuseishien Tool may insecurely load Dynamic Link Libraries
Teikihoukokusho Sakuseishien Tool provided by Agency for Natural Resources and Energy of METI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. The tool is provided as a ZIP archive. It is assumed that a user extracts the tool the...
IBM InfoSphere Streams Cross-Site Scripting Vulnerability
IBM InfoSphere Streams is a suite of data analytics platforms from IBM in the United States. The platform enables user-developed applications to quickly access, analyze and correlate information from multiple real-time sources. A cross-site scripting vulnerability exists in IBM InfoSphere Streams...
Unspecified Vulnerability in Oracle Hospitality 9700
Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle.Hospitality 9700 is one of the hospitality management components. A security vulnerability exists in the Property Management Systems subcomponent of the...
CVE-2017-11566
AppUse 4.0 allows shell command injection via a proxy field...
Command injection
AppUse 4.0 allows shell command injection via a proxy field...
CVE-2017-11566
CVE-2017-11566 concerns AppUse 4.0, where a vulnerability exists in a proxy field that enables shell command injection. The issue is documented with CVSS scores (2.0/3.1) indicating a high-severity, locally exploitable flaw that could allow complete confidentiality, integrity, and availability im...