8995 matches found
Improper access control
VMware AirWatch Console AWC contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator...
CVE-2017-4942
The CVE-2017-4942 entry corresponds to VMware AirWatch Console (AWC) with a Broken Access Control vulnerability. The connected VMware advisory VMSA-2017-0020 confirms that successful exploitation could disclose end-user device details to an unauthorized administrator. The advisory documents that ...
CVE-2017-4942
VMware AirWatch Console AWC contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator...
Configuring Citrix StoreFront with the Secure Browser Service
This article describes how existing on-premise XenApp/XenDesktop customers can integrate and deliver Secure Browser via their existing Storefronts to end users...
VMware AirWatch Console updates address Broken Access Control vulnerability.
VMware AirWatch Console AWC Broken Access Control VMware AirWatch Console AWC contains a Broken Access Control vulnerability. Successful exploitation of this issue could result in end-user device details being disclosed to an unauthorized administrator. The Common Vulnerabilities and Exposures...
CVE-2017-1606
IBM Financial Transaction Manager FTM for Multi-Platform MP 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID:...
CVE-2017-1356
IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126683...
IBM Financial Transaction Manager SQL Injection Vulnerability
IBM Financial Transaction Manager FTM for Multi-Platform MP is a cross-platform financial transaction manager from IBM, USA, which is used to monitor, track and report on financial payments and transactions. A SQL injection vulnerability exists in IBM FTM for MP versions 3.0.0.0 through 3.0.0.7,...
IBM Atlas eDiscovery Process Management SQL Injection Vulnerability
IBM Atlas eDiscovery Process Management is a product within the Information Lifecycle Governance solution from IBM USA that is used to help attorneys, paralegals, and evidence supervisors rigorously and logically manage legal evidence retention workflows. A SQL injection vulnerability exists in I...
UBUNTU-CVE-2017-17121
The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service memory access violation or possibly have unspecified other impact via a COFF binary in which a relocation refers to a location after the end of the...
FTP wildcard out of bounds read
libcurl contains a read out of bounds flaw in the FTP wildcard function. libcurl's FTP wildcard matching feature, which is enabled with the CURLOPTWILDCARDMATCH option can use a built-in wildcard function or a user provided one. The built-in wildcard function has a flaw that makes it not detect t...
UBUNTU-CVE-2017-16944
The receivemsg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service infinite loop and stack exhaustion via vectors involving BDAT commands and an improper check for a '.' character signifying the end of the content, related to the...
DEBIAN-CVE-2017-16944
The receivemsg function in receive.c in the SMTP daemon in Exim 4.88 and 4.89 allows remote attackers to cause a denial of service infinite loop and stack exhaustion via vectors involving BDAT commands and an improper check for a '.' character signifying the end of the content, related to the...
BlueTech Enterprise Website Management System (PHP version) front-end arbitrary file download vulnerability
BlueTech Enterprise Website Management System PHP version is developed with PHP+MYSQL technology and MVC mode. Support pseudo-static function, can generate google and baidu map, support custom url, keywords and description, in line with SEO standards. BlueTech enterprise website management system...
Multiple Huawei products cross the border to read vulnerabilities
Huawei DP300, RP200, RSE6500, TX50, VP9660, TE series and ViewPoint series are Huawei's all-in-one desktop and HD video conferencing end products for high-end customers. An out-of-bounds read vulnerability exists in multiple Huawei products, due to the device failing to adequately validate user...
Threat Outbreak Alert RuleID31313: Email Messages Distributing Malicious Software on November 15, 2017
Medium Alert ID: 55936 First Published: 2017 November 15 20:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31313 may contain the following files: Name |...
SQL injection vulnerabililty in the back end search filter and the front end listing module
More info at https://contao.org/en/news/contao-3531.html...
SQL injection vulnerabililty in the front end listing module
More info at https://contao.org/en/news/contao-448.html...