UCOPIA Wireless Appliance < 5.1.8 - Local Privilege Escalation

CVE-2017-11322 UCOPIA Wireless Appliance 5.1.8 Privileges Escalation Asset description UCOPIA solutions bring together a combination of software, appliance and cloud services serving small to large customers. More than 12,000 UCOPIA solutions are deployed and maintained by UCOPIA expert partners...

UCOPIA Wireless Appliance Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits CVE-2017-11322 UCOPIA Wireless Appliance 5.1.8 Privileges Escalation Asset description UCOPIA solutions bring together a combination of software, appliance and cloud services serving small to large customers. More than 12,000 UCOPIA solutions...

Sitecore Path Traversal Vulnerability

Sitecore is an online marketing content management system CMS from Sitecore, Denmark. The system supports content editing, multiple languages, multi-site deployment, digital asset management and more. A path traversal vulnerability exists in Sitecore version 8.2. An attacker can exploit this...

Cross site scripting

In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter...

CVE-2017-11440

In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter...

Path traversal

In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter...

CVE-2017-11439

In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter...

CVE-2017-11440

In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the admin/LinqScratchPad.aspx Reference parameter...

PT-2017-5202 · Cisco · Asa 5540 +10

Name of the Vulnerable Software and Affected Versions: ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance ASA Software versions 9.4.x through 9.4.0, 9.2.x through 9.2.3, 8.4.x through 8.4.6, 8.2.x through 8.2.4 ASA 5510 Adaptive Security Appliance Adaptive Security Appliance ASA...

Sitecore CMS 8.2 - Cross-Site Scripting Arbitrary File Disclosure

Sitecore CMS 8.2 - Cross-Site Scripting Arbitrary File Disclosure Exploit title: Sitecore CMS v8.2 multiple vulnerabilities Product: Sitecore Version: 8.2, Rev: 161221, Date: 21st December, 2016 Date: 05-05-2017 Author: Usman Saeed Email: [email protected] Vendor Homepage: http://www.sitecore.net/...

Unspecified Vulnerability in IBM Security Guardium

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes easy UI customization, report management and discovery and a streamlined audit process builder. A security vulnerability exists in IBM Security Guardium...

CVE-2017-3393

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: Interaction History. Supported versions that are affected are 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...

CVE-2017-1122

IBM Security Guardium 8.2, 9.0, and 10.0 contains a vulnerability that could allow a local attacker with CLI access to inject arbitrary commands which would be executed as root. IBM X-Force ID: 121174...

CVE-2017-1122

CVE-2017-1122 affects IBM Security Guardium versions 8.2, 9.0, and 10.0. A local attacker with CLI access can inject arbitrary commands that would run with root privileges. IBM’s bulletin lists remediation fixes for Guardium 8.2 (EOS 2016) and fixes for Guardium 9.x and 10.x (via FixCentral optio...

Drupal cross-site request forgery vulnerability (CNVD-2017-03746)

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site request forgery vulnerability exists in Drupal versions 8.2.x prior to 8.2.7, which stems from the program's failure to protect the administrative path with a...

CVE-2017-6379

Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID...

CVE-2017-6379

Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID...

CVE-2017-6377

When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass...

CVE-2017-6379

CVE-2017-6379 concerns Drupal 8.x: admin paths in 8.2.x prior to 8.2.7 lacked CSRF protection, allowing an attacker to disable some blocks on a site. The issue is mitigated by the requirement that an attacker know the block ID. Connected sources (DRUPAL GHSA/NVD records) corroborate that this is ...

CVE-2017-6377: Incorrect Authorization

When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass...