1374 matches found
CVE-2018-2596
CVE-2018-2596 affects Oracle WebCenter Content (Content Server) within Oracle Fusion Middleware. Affected versions are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the component, with attacks needing user in...
CVE-2018-2597
Vulnerability in the Oracle Hospitality Cruise Dining Room Management component of Oracle Hospitality Applications subcomponent: SilverWhere. The supported version that is affected is 8.0.78. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...
EMC RSA Authentication Manager < 8.2 SP1 Patch 6 Stored Cross-Site Scripting (ESA-2017-152)
The version of EMC RSA Authentication Manager running on the remote host is prior to 8.2 SP1 Patch 6 8.2.1.6. It is, therefore, affected by an unspecified stored cross-site scripting vulnerability. Attackers could potentially exploit this vulnerability to execute arbitrary HTML or JavaScript code...
CVE-2017-14379
EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...
CVE-2017-14379
The CVE-2017-14379 entry concerns EMC RSA Authentication Manager prior to 8.2 SP1 Patch 6 (8.2.1.6) with a stored cross-site scripting (XSS) flaw affecting the Security Console. The underlying issue is a stored XSS vulnerability in the web application that could allow a remote attacker to execute...
Directory traversal
TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory...
CVE-2017-11177
TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory...
CVE-2017-11177
TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory...
Advantech WebAccess Webvrpcs Service Opcode 80061 Stack Buffer Overflow
There is a stack buffer overflow in Advantech WebAccess 8.2. By sending a specially crafted DCERPC request, an attacker could overflow the buffer and execute arbitrary code. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported: The stack overflow happens in sub10004BC8:...
CVE-2017-14373
EMC RSA Authentication Manager 8.2 SP1 P4 and earlier contains a reflected cross-site scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system...
CVE-2017-10325
Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite subcomponent: Applications Calendar. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated...
CVE-2017-10325
Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite subcomponent: Applications Calendar. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated...
UCOPIA Wireless Appliance < 5.1.8 - Local Privilege Escalation
CVE-2017-11322 UCOPIA Wireless Appliance 5.1.8 Privileges Escalation Asset description UCOPIA solutions bring together a combination of software, appliance and cloud services serving small to large customers. More than 12,000 UCOPIA solutions are deployed and maintained by UCOPIA expert partners...
UCOPIA Wireless Appliance Privilege Escalation Vulnerability
Exploit for linux platform in category local exploits CVE-2017-11322 UCOPIA Wireless Appliance 5.1.8 Privileges Escalation Asset description UCOPIA solutions bring together a combination of software, appliance and cloud services serving small to large customers. More than 12,000 UCOPIA solutions...
Sitecore Path Traversal Vulnerability
Sitecore is an online marketing content management system CMS from Sitecore, Denmark. The system supports content editing, multiple languages, multi-site deployment, digital asset management and more. A path traversal vulnerability exists in Sitecore version 8.2. An attacker can exploit this...
Cross site scripting
In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter...
Path traversal
In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter...
CVE-2017-11440
In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter...