CVE-2016-5967

The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...

Information disclosure

The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...

CVE-2016-5967

The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...

PT-2016-6736

Name of the Vulnerable Software and Affected Versions IBM Rational Asset Analyzer version 6.1.0 before FP10 Description The issue allows local users to discover the WAS Admin password by reading IM native logs. Recommendations For IBM Rational Asset Analyzer version 6.1.0 before FP10, apply FP10 ...

CVE-2016-5967: Insertion of Sensitive Information into Log File

The installation component in IBM Rational Asset Analyzer RAA 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs...

Sivann ITDB 'examples_support/editable_ajax.php' cross-site scripting vulnerability

Sivann ITDB is a web-based asset inventory management tool for storing information about assets in an office environment. A cross-site scripting vulnerability exists in Sivann ITDB 'examplessupport/editableajax.php'. Because user input is not validated, an attacker could exploit the vulnerability...

Fast Breakfast Scratchers Bonus Packs Have Design Flaws

Fast Breakfast App is a mobile service that can help you buy breakfast. A design vulnerability exists in the Fast Breakfast Scratchers module. Due to lax checking in the program design process, an attacker can change the amount of red packets by exploiting the vulnerability, resulting in the loss...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2016-11328)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A cross-site...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2016-10505)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. A cross-site scripting vulnerability exists in IBM Maximo Asset Management versions 7.5 and 7.6. An attacker can exploit this vulnerability to inject arbitrary JavaScript code into the...

IBM Maximo Asset Management Information Disclosure Vulnerability (CNVD-2016-10463)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution. A security vulnerability exists in IBM Maximo Asset Management, which allows remote attackers to submit a special request to obtain sensitive information...

ManageEngine ServiceDesk Plus 9.2 Build 9207 Information Disclosure Vulnerability

Exploit for jsp platform in category web applications Title: ManageEngine ServiceDesk Plus Low Privileged User View All Tickets Date: 18 October 2016 Author: p0z Vendor: ManageEngine Vendor Homepage: https://www.manageengine.com/ Product: ServiceDesk Plus Version: 9.2 Build 9207 Other versions...

IBM Maximo Asset Management Information Disclosure Vulnerability (CNVD-2016-09860)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. An information disclosure vulnerability exists in IBM Maximo Asset Management, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Upload Vulnerability in Jinan Guozi Digital Technology Asset Management Information System

The functions of the asset management system cover all aspects of state-owned asset supervision and management business activities. The functions of the asset management system for grass-roots units include the management of applications and declarations, procurement and acceptance, daily changes...

Jinan Guozi Digital Technology Asset Management System fckeditor exists arbitrary file upload vulnerability

Asset management system of Jinan Guozi Digital Technology Co., Ltd. is a set of sharing and management platform for precision instruments or large instruments. Jinan Guozidian Digital Technology Asset Management System fckeditor has an arbitrary file upload vulnerability, which can be exploited b...

IBM Rational Asset Analyzer Local Information Disclosure Vulnerability

IBM Rational Asset Analyzer is a suite of asset analysis software from IBM that collects information about an application's structure, embedded business rules, and interdependencies and databases and provides an understanding of the associated impacts and risks of change. A security vulnerability...

CVE-2016-4741

The Assets component in Apple iOS before 10 allows man-in-the-middle attackers to block software updates via vectors related to lack of an HTTPS session for retrieving updates...

SQL Injection Vulnerability in Asset Management System sysbh Parameter of Jinan Guozi Digital Technology Co.

Asset management system of Jinan Guozi Digital Technology Co., Ltd. is a set of sharing and management platform for precision instruments or large instruments. The product suffers from SQL injection vulnerability, the vulnerability URL is: http://host/dxyqsyspt/sysList.aspx?sysbh=000001 The...

SQL Injection Vulnerability in Asset Management System sysbh Parameter of Jinan Guozi Digital Technology Co.

Asset management system of Jinan Guozi Digital Technology Co., Ltd. is a set of sharing and management platform for precision instruments or large instruments. The product suffers from SQL injection vulnerability, the vulnerability URL is: http://host/dxyqsyspt/sysDetail.aspx?sysbh=000001 The...

assetmanagement.gs.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-178336 Description| Value ---|--- Affected Website:| assetmanagement.gs.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

IBM Maximo Asset Management Cross-Site Scripting Vulnerability (CNVD-2016-06551)

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. A cross-site scripting vulnerability exists in IBM Maximo Asset Management versions 7.6, 7.5, and 7.1, which can be exploited by an attacker to execute arbitrary script code and steal...