Pivotal Spring Data JPA SQL Injection Vulnerability

Pivotal is a new company formed by EMC and VMware. A SQL injection vulnerability exists in Pivotal Spring Data JPA due to the program's inability to adequately clean user input data. An attacker could exploit the vulnerability to access and modify data...

CVE-2016-6027

The Configuration Manager in IBM Sterling Secure Proxy SSP 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.0 iFix 1 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information or modify data by leveraging use of HTTP...

Netbaran SQL Injection Vulnerability

Netbaran suffers from a SQL injection vulnerability that can be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying database...

Lokomedia CMS Remote SQL Injection Vulnerability

Lokomedia CMS is a content management system. Lokomedia CMS suffers from a remote SQL injection vulnerability. An attacker could use this vulnerability to take control of the application, access or modify data, or exploit potential vulnerabilities in the underlying database...

ADOdb SQL Injection Vulnerability

ADOdb is an intermediate component for PHP programs to access the database . A SQL injection vulnerability exists in version 5.x of ADOdb. An attacker could use this vulnerability to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying database...

SAP Adaptive Server Enterprise SQL Injection Vulnerability (CNVD-2016-08065)

SAP Adaptive Server Enterprise Sybase ASE is a relational database management system from SAP. The system can be used in data-intensive environments and is characterized by high speed and stable performance. An SQL injection vulnerability exists in SAP Adaptive Server Enterprise. Because the...

SAP Adaptive Server Enterprise SQL Injection Vulnerability (CNVD-2016-08064)

SAP Adaptive Server Enterprise Sybase ASE is a relational database management system from SAP. The system can be used in data-intensive environments and is characterized by high speed and stable performance. An SQL injection vulnerability exists in SAP Adaptive Server Enterprise. Because the...

Exponent CMS SQL Injection Vulnerability (CNVD-2016-07937)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...

CVE-2016-4375

Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 aka iLO 3 firmware before 1.88, Integrated Lights-Out 4 aka iLO 4 firmware before 2.44, and Integrated Lights-Out 4 aka iLO 4 mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause...

Code injection

Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 aka iLO 3 firmware before 1.88, Integrated Lights-Out 4 aka iLO 4 firmware before 2.44, and Integrated Lights-Out 4 aka iLO 4 mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause...

Command Execution Vulnerability in Huawei UMA

Huawei UMA Unified Maintenance Audit is a unified audit system. It provides a unified O&M operation portal, controls and records O&M operations performed by users, and supports auditing by command view and video playback. A command execution vulnerability exists in Huawei UMA. As the system does...

Cybozu Garoon vulnerable to SQL injection

Overview Cybozu Garoon provided by Cybozu,Inc. is a groupware. Cybozu Garoon contains an SQL injection vulnerability in the "Messages" function. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under the...

Huawei OceanStor ISM Product Cross-Site Scripting Vulnerability

OceanStor ISM is an integrated system management software that can manage CSS, view alerts and some basic information about CSS, and do some basic configuration, etc. A cross-site scripting vulnerability exists in the management interface of OceanStor ISM, due to the system not translating specia...

Authentication flaw

The 1 Organization and 2 Locations APIs in Foreman before 1.11.3 and 1.12.x before 1.12.0-RC1 allow remote authenticated users with unlimited filters to bypass organization and location restrictions and read or modify data for an arbitrary organization by leveraging knowledge of the id of that...

ReadyDesk SQL Injection Vulnerability

ReadyDesk is a Web-based helpdesk software solution from ReadyDesk, Inc. A SQL injection vulnerability exists in ReadyDesk version 9.1, which can be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying database...

Cross-Site Scripting

Overview Affected versions of jqtree are vulnerable to cross-site scripting in the drag and drop functionality for modifying tree data. When a user attempts to drag a node to a different position in the hierarchy, script content existing within the node will be executed. Recommendation Update to...

Oracle Java SE Multiple Unspecified Vulnerabilities-01 (Jul 2016) - Linux

Oracle Java SE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE Multiple Unspecified Vulnerabilities-03 (Jul 2016) - Windows

Oracle Java SE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:jre";...

Oracle Java SE Multiple Unspecified Vulnerabilities-01 (Jul 2016) - Windows

Oracle Java SE is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TYPO3 'Another Simple Gallery' Extension SQL Injection Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.Another Simple Gallery is one of the gallery extension plugin that displays images based on catalogs and categories. A SQL injection vulnerability exists in TYPO3 'Anothe...