CVE-2016-1364

Cisco Wireless LAN Controller WLC Software 7.4 before 7.4.130.0MD and 7.5, 7.6, and 8.0 before 8.0.110.0ED allows remote attackers to cause a denial of service device reload via crafted Bonjour traffic, aka Bug ID CSCur66908...

McAfee Email Gateway XSS Vulnerability (SB10153)

McAfee Email Gateway is prone to a cross-site scripting XSS vulnerability in the generation of HTML email alerts using SMTP. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Patron Info System SQL Injection

Document Title: =============== Patron Info System - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1784 Release Date: ============= 2016-03-21 Vulnerability Laboratory ID VL-ID: ==================================== 1784 Comm...

CVE-2016-0222

IBM Maximo Asset Management 7.6 before 7.6.0.3 IFIX001 allows remote authenticated users to bypass intended access restrictions and read arbitrary purchase-order work logs via unspecified vectors...

CVE-2016-0222

IBM Maximo Asset Management 7.6 is affected by CVE-2016-0222; versions prior to 7.6.0.3 IFIX001 allow an authenticated remote user to bypass access controls and read arbitrary purchase-order work logs via unspecified vectors. The IBM advisory recommends applying the corresponding Fix Central inte...

Cisco Wireless LAN Controller Client Disconnection DoS

The remote Cisco Wireless LAN Controller WLC is affected by a denial of service vulnerability due to the lack of access control to the management GUI. An unauthenticated, remote attacker can exploit this to trigger client disconnections. C Tenable Network Security, Inc. include"compat.inc"; if...

Design/Logic Flaw

Cisco Wireless LAN Controller WLC devices with software 7.6.x, 8.0 before 8.0.121.0, and 8.1 before 8.1.131.0 allow remote attackers to change configuration settings via unspecified vectors, aka Bug ID CSCuw06153...

Cisco Wireless LAN Controller Unauthorized Access Vulnerability

Devices running Cisco Wireless LAN Controller WLC contain an unauthorized access vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2015-5051

IBM Maximo Asset Management 7.5 before 7.5.0.8 IF6 and 7.6 before 7.6.0.2 IF1 and Maximo Asset Management 7.5 before 7.5.0.8 IF6, 7.5.1, and 7.6 before 7.6.0.2 IF1 for SmartCloud Control Desk allow remote authenticated users to bypass intended access restrictions on query results via unspecified...

Windows Activation Errors After Upgrading to VDA 7.6 FP3 with PVD

Windows KMS activation might fail, or Windows will go to adeactivated state after some time. This occurs after upgrading to the version of PVD software included in the VDA 7.6 Feature Pack 3 release...

CVE-2015-2278

CVE-2015-2278 and CVE-2015-2282 affect SAP products via the LZH/LZC decompression paths. The root causes are in the LZH BuildHufTree function (vpa108csulzh.cpp) and the LZC decompression logic (vpa106cslzc.cpp), where attacker-controlled indices can trigger out-of-bounds reads/writes. Affected so...

Symantec Workspace Streaming Agent Privilege Escalation Vulnerability

Symantec Workspace Streaming Agent is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Tuleap 7.6-4 PHP Object Injection Vulnerability

Tuleap versions 7.6-4 and below suffer from a PHP object injection vulnerability in register.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the frontend in Open-Xchange OX AppSuite before 7.4.2-rev33 and 7.6.x before 7.6.0-rev16 allows remote attackers to inject arbitrary web script or HTML via vectors related to unspecified fields in RSS feeds...

php-nuke platinum 7.6.b.5 - Remote File Inclusion Vulnerability

No description provided by source. ---------------------------------------------- GrEeTs To -=sHaDoW sEcUrItY TeAm=- GrEaTs To ---------------------------------------------- A2J, Chucks, The Pitbull, ICQBomber, str0ke ---------------------------------------------- BiG sHoUt OuT tO udplink.net &...

PHP-Nuke 7.6 Surveys Module HTTP Response Splitting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13201/info PHP-Nuke is prone to a HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to...

Manage Engine Service Desk Plus 7.6 - woID SQL Injection

No description provided by source...

CVE-2013-0943

EMC NetWorker 7.6.x and 8.x before 8.1 allows local users to obtain sensitive configuration information by leveraging operating-system privileges to perform decryption with nsradmin...

Scientific Linux Security Update : Core X11 clients on SL6.x i386/x86_64 (20130221)

It was found that the x11perfcomp utility included the current working directory in its PATH environment variable. Running x11perfcomp in an attacker- controlled directory would cause arbitrary code execution with the privileges of the user running x11perfcomp. CVE-2011-2504 Also with this update...

CentOS Update for xorg-x11-utils CESA-2013:0502 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...