Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27278)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27282)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27279)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27274)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2019-27292)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle VM VirtualBox Access Control Error Vulnerability

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27302)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle VM VirtualBox Access Control Error Vulnerability (CNVD-2019-27271)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

TWiki < 6.1.0 XSS Vulnerability

bin/statistics in TWiki 6.0.2 allows XSS via the webs parameter. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:twiki:twiki"; if...

CVE-2013-7465

Ice Cold Apps Servers Ultimate 6.0.212 does not require authentication for TELNET, SSH, or FTP, which allows remote attackers to execute arbitrary code by uploading PHP scripts...

CVE-2018-14805

ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability...

CVE-2018-14805

ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both conditions are required to exploit this vulnerability...

Fortinet FortiManager < 6.0.2 Information Disclosure Vulnerability (FG-IR-18-016)

The version of FortiManager running on the remote device is prior to 6.0.2. It is, therefore, affected by an information disclosure vulnerability. A user with an adom assignment can potentially read the settings of other vdoms. C Tenable Network Security, Inc. include"compat.inc"; if description...

Security Bulletin: IBM Rational Software Architect Design Manager is vulnerable to cross-site scripting (XSS) attack (CVE-2017-1462)

Summary Document web editor in RSA DM could be vulnerable to cross-site scripting attack if document content was tampered. Vulnerability Details CVEID: CVE-2017-1462 DESCRIPTION: IBM Rhapsody DM is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript...

Security Bulletin: Security vulnerability affects the Lifecycle Query Engine (LQE) that is shipped with Jazz Reporting Service (CVE-2017-1490)

Summary There is a security vulnerability in the Lifecycle Query Engine LQE shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2017-1490 DESCRIPTION: An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service could disclose highly sensitive information...

Security Bulletin: Cross-site Scripting vulnerability affects Rational Engineering Lifecycle Manager

Summary Rational Engineering Lifecycle Manager is vulnerable to a cross-site scripting attack with potential for credentials disclosure within a trusted session. Vulnerability Details CVEID: CVE-2017-1168 DESCRIPTION: IBM RELM is vulnerable to cross-site scripting. This vulnerability allows users...

Security Bulletin: Multiple security vulnerabilities affect the Lifecycle Query Engine (LQE) that is shipped with Jazz Reporting Service (CVE-2016-5897, CVE-2016-6039)

Summary There are multiple security vulnerabilities in the Lifecycle Query Engine LQE shipped with Jazz Reporting Service. Vulnerability Details CVEID: CVE-2016-5897 DESCRIPTION: IBM Jazz Reporting Service JRS is vulnerable to HTML injection. A remote attacker could inject malicious HTML code,...

Cross site request forgery (csrf)

The GridServer Broker, and GridServer Director components of TIBCO Software Inc. TIBCO DataSynapse GridServer Manager contain vulnerabilities which may allow an authenticated user to perform cross-site scripting XSS. In addition, an authenticated user could be a victim of a cross-site request...

CVE-2017-1701

Summary: CVE-2017-1701 affects IBM Rational Team Concert / RTC (IBM Engineering Workflow Management) versions 5.0–6.0.5. The root cause is the use of a weak encryption algorithm to store user credentials, enabling an authenticated user to obtain highly sensitive information. Impact: credential le...

OTRS 5.x <= 5.0.24 and 6.x <= 6.0.1 RCE Vulnerability

OTRS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:otrs:otrs"; if...