CVE-2017-1785: Exposure of Sensitive Information to an Unauthorized Actor

IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain sensitive information. IBM X-Force ID: 136859...

HP Intelligent Management Center Arbitrary Code Execution Vulnerability (CNVD-2017-33287)

HP Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Fault, Configuration, Accounting, Performance and Security FCAPS model. An arbitrary code execution vulnerability exists in HP Intelligent Management Center, where a remote...

CVE-2017-6338

Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance IWSVA 6.5 before CP 1746 allow an authenticated, remote user with low privileges like 'Reports Only' or 'Auditor' to change FTP Access Control Settings, create or modify reports, or upload an HTTPS Decryption...

UBUNTU-CVE-2016-9891

Cross-site scripting XSS vulnerability in admin/media.php and admin/mediaitem.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or mediatitle parameter aka the media title...

CVE-2016-5680

Stack-based buffer overflow in cgi-bin/cgimain in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary code via the sn parameter to the transferlicense command...

IBM Rational Publishing Engine Cross-Site Scripting Vulnerability

IBM Rational Publishing Engine is the U.S. IBM company's set of specialized for the product development process involves documents, reports for automated generation, publishing tools. A cross-site scripting vulnerability exists in ifix002 versions of IBM Rational Publishing Engine prior to 2.0.1,...

CVE-2016-2219

Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PostgreSQL Privilege Escalation

The vulnerability of the PostgreSQL database management system relates to errors that occur when calling a function written in another language, or which the user cannot call directly due to established access restrictions. Exploiting this vulnerability in functions of PostgreSQL’s procedural...

MySQL Database Access Bypass

The Oracle MySQL Server database management system contains a vulnerability that allows remote users who have passed authentication to influence the accessibility of data by using a subcomponent called Partition...

HPE Insight Control server deployment information disclosure vulnerability (CNVD-2016-03947)

HPE Insight Control server deployment is a set of server management configuration tools from Hewlett Packard Enterprise HPE. An information disclosure vulnerability exists in HPE Insight Control server deployment, which could allow an authenticated remote user to obtain sensitive information or...

HPE Network Node Manager Denial of Service Vulnerability

HP Network Node Manager i-series NNMi software delivers powerful out-of-the-box features to help your network operations team efficiently manage networks of any size. A security vulnerability exists in HPE Network Node Manager i NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.01 that could allow ...

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability (CNVD-2016-01927)

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. Cisco Unified Communications Domain Manager CDM 8.11 suffers from a cross-site scripting vulnerability in its implementation, which can be exploited by an authenticated remote user to inject arbitrary...

NHN PlayArt LINE Denial of Service Vulnerability

NHN PlayArt LINE is a suite of live chat software from the Japanese company NHN PlayArt. A denial of service vulnerability exists in NHN PlayArt LINE version 4.3.1 and prior versions, which allows a remote, authenticated user to cause a denial of service application crash by exploiting the...

Cybozu Office Denial of Service Vulnerability (CNVD-2016-01263)

Cybozu Office is a WEB-based cross-platform office solution developed by Cybozu Japan. A denial of service vulnerability exists in Cybozu Office versions 9.9.0 through 10.3.0 that could allow an authenticated remote user to cause a denial of service via a crafted CSV file...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2016-01062)

Cisco Unified Communications Manager is the call processing component of the IP Telephony solution from Cisco. An information disclosure vulnerability exists in Cisco Unified Communications Manager 11.5 0.98000.480 that could allow an authenticated, remote user to obtain sensitive database table...

Symantec Endpoint Encryption Information Disclosure Vulnerability

Symantec Endpoint Encryption i.e. SEE is a suite of software from Symantec that provides advanced encryption and management capabilities for desktops, laptops and removable storage devices. An information disclosure vulnerability exists in versions of Symantec Endpoint Encryption prior to 11.1.0...

Ipsilon Denial of Service Vulnerability

Ipsilon is a server and toolkit for configuring Apache-based service providers. A denial of service vulnerability exists in Ipsilon version 0.1.0 prior to 1.0.1. It allows an authenticated remote user to cause a denial of service via a duplicate SP name...

TIBCO LogLogic Unity Information Disclosure Vulnerability

TIBCO LogLogic Unity is an acquisition by U.S.-based infrastructure software provider TIBCO to deliver the industry's leading scalable logging and security management platform specifically designed for the enterprise and cloud. An information disclosure vulnerability exists in versions of TIBCO...

Multiple Cross-Site Scripting Vulnerabilities in Cisco FireSIGHT Management Center

Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. Multiple...

Cisco Secure Access Control Server SQL Injection Vulnerability

Cisco Secure Access Control Server that is ACS, is the United States Cisco Cisco a security access control server. A SQL injection vulnerability exists in Cisco Secure Access Control Server 5.7. It allows an authenticated remote user to execute arbitrary SQL commands via a crafted URL...