CVE-2016-2018

HPE Systems Insight Manager SIM before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-2030

Technical details about CVE-2016-2030 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specific affected products, exploit vectors, or remediation are described here.

CVE-2016-2029

HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4358...

CVE-2016-2309

iRZ RUH2 before 2b does not validate firmware patches, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

CVE-2016-2309

iRZ RUH2 before 2b does not validate firmware patches, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

Code injection

iRZ RUH2 before 2b does not validate firmware patches, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

CVE-2016-2309

CVE-2016-2309 affects iRZ RUH2 prior to 2b: Unrestricted upload of firmware patches (CWE-434) allows remote authenticated users to upload unvalidated patches, potentially modifying firmware/data or causing DoS. Affected product: RUH2 serial-to-network converter. Root cause: firmware patch validat...

OurPHP 资料修改功能SQL注入漏洞

No description provided by source...

SAP NetWeaver AS JAVA SQL Injection Vulnerability

SAP NetWeaver is an integrated, service-oriented application platform that provides a development and runtime environment for SAP applications.SAP NetWeaver AS Java is an application server that runs in NetWeaver and is based on the Java programming language. An SQL injection vulnerability exists...

HPE System Management Homepage Information Disclosure Vulnerability

HPE System Management Homepage is a Web-based interface. The interface consolidates and simplifies the process of single-system management of HP servers running HP-UX, Linux, and Microsoft Windows operating systems. An information disclosure vulnerability exists in HPE System Management Homepage...

CVE-2016-2296

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-2296

CVE-2016-2296 affects Meteocontrol WEB’log Basic 100, Light, Pro and Pro Unlimited. The vulnerability is an authentication bypass allowing access to the post-admin login pages, enabling remote attackers to obtain sensitive information or modify data (unspecified vectors). Technical details are su...

Information disclosure

HPE System Management Homepage before 7.5.5 allows local users to obtain sensitive information or modify data via unspecified vectors...

CANDID 'view.php' SQL Injection and Cross Site Scripting Vulnerabilities

CANDID is prone to sql injection and cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-2014

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

CVE-2016-2014

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

CVE-2016-2014

CVE-2016-2014 affects HPE Network Node Manager i (NNMi) versions 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01. The vulnerability allows remote authenticated users to modify data or cause a denial of service via unspecified vectors. The provided connected sources confirm the affected product and the i...

CVE-2016-2014

HPE Network Node Manager i NNMi 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

Unspecified Vulnerability in Oracle Database Server RDBMS Security Component (CNVD-2016-02583)

Oracle Database Server is a relational database management system from Oracle Corporation, of which RDBMS Security is a database security storage component. An unspecified vulnerability in the RDBMS Security component of Oracle Database Server can be exploited by a local attacker to update, inser...

Oracle Sun Solaris Fwflash Subcomponent Denial of Service Vulnerability

racle Sun Solaris is a Unix-like operating system from Oracle. A security vulnerability in the Fwflash subcomponent of Oracle Sun Solaris version 11.3 can be exploited by a local attacker to create, delete, or modify data, and may also cause a denial of service. The integrity and availability of...