YesWiki PHP Object Injection Vulnerability

YesWiki is a Wiki system written in PHP. The system is primarily used to create and manage websites in a collaborative manner. A PHP object injection vulnerability exists in the deserialization process of user input parameters in the i18n.inc.php file in YesWiki cercopitheque beta 1 and earlier...

Flintcms Privilege Vulnerability

flintcms is a content management system CMS. A power-lifting vulnerability exists in flintcms 1.1.9 and earlier versions. An attacker can exploit this vulnerability to compromise an account...

Omron CX-Supervisor Code Execution Vulnerability

Omron CX-Supervisor is a visual machine controller from Omron Japan. A code execution vulnerability exists in Omron CX-Supervisor version 3.4.1.0 and earlier versions, which can be exploited by an attacker to execute code within the context of an application...

Adobe Experience Manager Input Validation Bypass Vulnerability

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. An input validation bypass vulnerability exists in Adobe Experience Manager 6.3 and earlier versions. An attacker could use this vulnerability to...

Delta Electronics CNCSoft and ScreenEditor Out-of-Bounds Read Vulnerability

Delta Electronics CNCSoft and ScreenEditor are products of Delta Electronics, a CNC machine simulation system software and ScreenEditor, a HMI programming software. An out-of-bounds read vulnerability exists in Delta Electronics CNCSoft version 1.00.83 and earlier and ScreenEditor version 1.00.54...

CVE-2018-14785

NetComm Wireless G LTE Light Industrial M2M Router NWL-25 with firmware 2.0.29.11 and prior. The directory of the device is listed openly without authentication...

SquirrelMail Cross-Site Scripting Vulnerability (CNVD-2019-19608)

SquirrelMail is a cross-platform use of PHP4 development Webmail mail system . A cross-site scripting vulnerability exists in the email message display page in SquirrelMail 1.4.22 and earlier versions, which can be exploited by remote attackers to inject malicious scripts into a web page and...

Oracle MySQL Server Component Denial of Service Vulnerability (CNVD-2019-07339)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the InnoDB subcomponent of the MySQL Server 8.0.11 and earlier components of Oracle MySQL. An attacker could explo...

Oracle MySQL Server Component Denial of Service Vulnerability (CNVD-2019-07342)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: DDL subcomponent of the MySQL Server 5.7.22 and earlier and 8.0.11 and earlier components of Oracle...

Oracle MySQL Server Component Denial of Service Vulnerability (CNVD-2019-07344)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer subcomponent of the MySQL Server 8.0.11 and earlier components of Oracle MySQL. An attacker...

Oracle MySQL Server Component Denial of Service Vulnerability (CNVD-2019-07337)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Shell: Core / Client subcomponent of the MySQL Server 8.0.11 and earlier components of Oracle MySQL. An attack...

Foxit Reader Remote Code Execution Vulnerability (CNVD-2018-14564)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A post-release reuse vulnerability exists in the handling of Polygon annotations in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit this...

Foxit Reader Remote Code Execution Vulnerability (CNVD-2018-14562)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A post-release reuse vulnerability exists in the handling of Square annotations in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit this...

Foxit Reader Type Obfuscation Remote Code Execution Vulnerability (CNVD-2018-15092)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

Foxit Reader Type Obfuscation Remote Code Execution Vulnerability (CNVD-2018-15102)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

PT-2018-10495 · Intuit · Intuit Lacerte

Name of the Vulnerable Software and Affected Versions: Intuit Lacerte version 2017 Intuit Lacerte versions prior to 2017 Description: The software transfers the entire customer list in cleartext over SMB, allowing attackers to obtain sensitive information by sniffing the network or conduct...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14450)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of events in Foxit Reader 9.1.0.5096 and earlier versions for Windows platforms, where the program fails to verify the...

CVE-2018-12798

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have a Heap Overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...

CVE-2018-12765

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure...

CVE-2018-12760

Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions have an Out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user...