EulerOS Virtualization 2.5.2 : kernel (EulerOS-SA-2018-1382)

According to the version of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A security flaw was found in the chapservercomputemd5 function in the ISCSI target code in the Linux kernel in a way an authenticati...

CVE-2018-3241

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 - 17.12 and 18.8. Easily exploitable vulnerability allows...

Debian DLA-1531-1 : linux-4.9 security update

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. CVE-2018-6554 A memory leak in the irdabind function in the irda subsystem was discovered. A local user can take advantage of this flaw to cause a deni...

Vulnerability of Over-authorized Access in the Backend of Lan Yu Tianshen Meteorological Business Service System

Lanyu Tenchen Meteorological Business Service System is a complete public meteorological service business system developed by Chongqing Lanyu Tenchen Technology Co. A vulnerability exists in the background of Lanyu Tenchen Meteorological Service System, which stems from the system's failure to...

Design/Logic Flaw

Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware subcomponent: Oracle Notification Service. Supported versions that are affected are 12.2.1.2 and 12.2.1.3. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTPS to...

Vulnerability in over-authorized access of Tongda OA of Beijing Tongda Science & Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. Tongda OA has an override access...

Vulnerability of Jiangyin Talent System with Over-authorized Access

Jiangyin Talent Network Talent Recruitment System is a set of talent system developed by Jiangyin Extraordinary Technology Co. Jiangyin Talent System suffers from an override access vulnerability. The vulnerability is caused by the lack of authentication of the program. An attacker can use this...

CVE-2018-1387

CVE-2018-1387 affects IBM Cloud APM Monitoring Agent for WebSphere Applications (WebSphere Applications agent) in IBM Cloud APM 8.1.3, 8.1.4 and related components. Root cause: the privacy filter did not shield PCI/data when diagnostics or transaction tracking is enabled, potentially exposing sen...

Coremail's Android version suffers from an override access vulnerability.

Coremail Lobbyist Email System for Android is a mobile email app. There is an over-authorized access vulnerability in the "Personal Details" page of Coremail Lonker Mailbox System for Android. It allows attackers to utilize the vulnerability to modify the list field to query the name, cell phone...

Over-authorized Access and Weak Password Vulnerabilities in the Integrated Management System for Meteorological Information in Modern Agricultural Parks of Chongqing Lanyu Tianshen Science and Technology Co.

Modern Agricultural Park Weather Information Integrated Management System is a weather system for agriculture. Over-authorized access and weak password vulnerabilities exist in the Integrated Management System for Meteorological Information in Modern Agricultural Parks of Chongqing Lanyu Tianshen...

CVE-2016-8923

IBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow an authorized user to obtain sensitive information from the profile of a higher privileged user that they should not have access to. IBM X-Force ID: 118536...

Design/Logic Flaw

Vulnerability in the MySQL Cluster component of Oracle MySQL subcomponent: Cluster: General. Supported versions that are affected are 7.2.19 and earlier, 7.3.8 and earlier and 7.4.5 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-3286

Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite subcomponent: Patching. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where...

openSUSE Security Update : mysql-connector-java (openSUSE-2015-389)

mysql-connector-java was updated to 5.1.35 to fix one security issue and a number of bugs. The following vulnerability was fixed : - CVE-2015-2575: Difficult to exploit vulnerability allows successful authenticated network attacks via multiple protocols. Successful attack of this vulnerability ca...

ESA-2014-156: EMC Documentum Content Server Insecure Direct Object Reference Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-156: EMC Documentum Content Server Insecure Direct Object Reference Vulnerability EMC Identifier: ESA-2014-156 CVE Identifier: CVE-2014-4629 Severity Rating: CVSS v2 Base Score: 8.2 AV:N/AC:M/Au:S/C:C/I:P/A:C Affected products: • All EMC...

PPS 4.0 perl-cgi web shell

PPS 4.0 perl-cgi web shell Данная утилита предназначенна для системных администраторов для удаленного управления своим сервером. Любое незаконное использование скрипта преследуется по закону. SIZE: 55.88 KB last update - 12.07.2013 09:45 Авторизация на cookies SystemInfo - информация о сервере Fi...

HP-UX Update for CDE dtspcd HPSBUX00175

Check for the Version of CDE dtspcd OpenVAS Vulnerability Test HP-UX Update for CDE dtspcd HPSBUX00175 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Google Search Appliance Detection

The remote host seems to be a Google Search Appliance. These appliances are used to index the files contained on an intranet and make them searchable. Make sure that this appliance can only be accessed by authorized personel or that the data it indexes is public. C Tenable Network Security, Inc...

MS Windows XP Workstation Service Remote Exploit (MS03-049)

Exploit for unknown platform in category remote exploits =========================================================== MS Windows XP Workstation Service Remote Exploit MS03-049 =========================================================== / To build new netapi32.lib pedump /exp netapi32.dll...