Broadcom Brocade SANnav Trust Management Issues Vulnerability (CNVD-2019-41467)

Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A trust management issue vulnerability exists in Broadcom Brocade SANnav versions prior to 2.0, which stems from the program's use of hard-coded passwords. A local attacker could exploit this vulnerability to access...

IBM Emptoris Spend Analysis SQL Injection Vulnerability

IBM Emptoris Spend Analysis is a product within IBM's suite of procurement solutions for consolidating, cleansing and categorizing spend data from decentralized systems. A SQL injection vulnerability exists in IBM Emptoris Spend Analysis versions 10.1.0 through 10.1.3, which can be exploited by a...

Password Reset Vulnerability in the Frontend of Nanjing Pintech Medical Online Exam System

Ltd. is a high-tech company dedicated to the research, development and sales of software products in the medical science and education industry. Nanjing Pinde Technology Medical Online Exam System There is a password reset vulnerability in the foreground, attackers can use the vulnerability to...

Weak password vulnerability in Qiji O&M system software

Qiji Technology is a product-based company founded by O&M management experts and focused on O&M operations. Qiji operation and maintenance management system software has a weak password vulnerability, which can be exploited to obtain information about the backend server and manage the bastion...

Yinchuan Xunlei Network Technology Co., Ltd. website building system has overstepped the right to access vulnerabilities

Yinchuan Xunlei Network Technology Co., Ltd. is one of the Internet application service providers in Ningxia. There is an access vulnerability in the website building system of Yinchuan Xunlei Network Technology Co. Attackers can take advantage of the vulnerability to access the background and...

PHPEMS Online Practice Exam System Version 5.0 Logic Flaw Vulnerability in Frontend

PHPEMS online mock exam system is developed based on PHP+Mysql, it is a PHP online mock exam system that supports multiple question types and presentation methods. PHPEMS online mock exam system version 5.0 there is a logic flaw vulnerability in the foreground, attackers can use the vulnerability...

Trovebox SQL Injection Vulnerability

Trovebox is an open source image sharing and management platform. album is one of the album components. A SQL injection vulnerability exists in the album component in Trovebox versions prior to 4.0.0-rc6. A remote attacker can exploit this vulnerability by sending an HTTP request to view, add,...

Ek Rishta SQL Injection Vulnerability in Joomla!

Joomla! is an open source content management system CMS developed by the Open Source Matters team in the U.S. The system provides RSS feeds, site search, etc. Ek Rishta is one of the wedding dating social components. A SQL injection vulnerability exists in Joomla! Ek Rishta version 2.9. A remote...

IBM Insights Foundation for Energy SQL Injection Vulnerability

IBM Insights Foundation for Energy is a suite of energy analytics, data management and visualization solutions from IBM in the United States. A SQL injection vulnerability exists in IBM Insights Foundation for Energy version 2.0. A remote attacker can exploit the vulnerability by sending speciall...

IBM Kenexa LMS on Cloud SQL Injection Vulnerability (CNVD-2017-00564)

IBM Kenexa LMS on Cloud is a configurable, enterprise-grade social learning management system LMS from IBM that integrates social networking, collaboration, and knowledge sharing capabilities. The system provides interactive features and supports users to evaluate learning content and share their...

DEBIAN-CVE-2016-4963

The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service management tool confusion by manipulating information in the backend directories in xenstore...