177 matches found
CVE-2018-8840
A remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior versions, and/or InTouch Machine Edition 2017 v8.1 and prior versions during a tag, alarm, or event related action such as read and write, which may allow remote code execution...
NetIQ Sentinel Information Disclosure Vulnerability (CNVD-2018-06631)
NetIQ Sentinel is a security information and event management SIEM solution from US-based NetIQ. The solution collects, stores and analyzes log data and reports on it, as well as analyzing security event data in real time. A security vulnerability exists in NetIQ Sentinel versions prior to 8.1.x...
Android Framework (crypto framework) information disclosure vulnerability
Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Framework crypto-framework is one of the cryptographic frameworks. Framework crypto framework is one of the cryptographic...
CVE-2017-13240
A information disclosure vulnerability in the Android framework crypto framework. Product: Android. Versions: 8.0, 8.1. ID: A-68694819...
Reflected Cross-Site Scripting Vulnerability in ZZCMS Version 8.1
ZZCMS is an enterprise website builder. A reflective cross-site scripting vulnerability exists in ZZCMS version 8.1. An attacker can construct an XSS statement and perform a pop-up box operation to obtain user cookies and other information...
CVE-2017-10318
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: WebConnect. Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
Multiple Vulnerabilities in JeeCMS v8.1 Template Management Function
JEECMS is a JEECMSv8.1 version is a collection of PC Internet, mobile Internet and WeChat website in one of the website group management system. JeeCMS v8.1 template management function exists file write, arbitrary file naming, arbitrary file creation vulnerability. An attacker can exploit the...
Advantech WebAccess Security Bypass Vulnerability
Advantech WebAccess formerly known as BroadWinWebAccess is a set of HMI/SCADA software based on browser architecture from Advantech. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A securit...
RDS redirected resources showing degraded performance in Windows 8.1 or Windows Server 2012 R2
RDS redirected resources showing degraded performance in Windows 8.1 or Windows Server 2012 R2 This article describes an issue that occurs on a Remote Desktop Session host that‘s running Windows 8.1 or Windows Server 2012 R2. You can fix this issue by using the update in this article. Before you...
Dell SonicWALL Global Management System GMS SQL Injection Vulnerability
Dell SonicWALL Global Management System is a tool for managing Dell SonicWALL from Dell, USA. A SQL injection vulnerability exists in Dell SonicWALL Global Management System GMS version 8.1. The vulnerability allows an attacker to take control of the application, access or modify data, or exploit...
Multiple Vulnerabilities in Dell SonicWALL Secure Mobile Access
Dell SonicWALL Secure Mobile Access is the SonicWALL Secure Remote Access family of devices in the Dell SonicWALL Secure Mobile Access solution from Dell, Inc. Multiple cross-site scripting and cross-site request forgery vulnerabilities exist in Dell SonicWALL Secure Mobile Access SMA version 8.1...
CVE-2016-6459
Cisco TelePresence endpoints running either CE or TC software contain a vulnerability that could allow an authenticated, local attacker to execute a local shell command injection. More Information: CSCvb25010. Known Affected Releases: 8.1.x. Known Fixed Releases: 6.3.4 7.3.7 8.2.2 8.3.0...
Cisco Video Communication Server and Expressway Identity Bypass Vulnerability
Cisco Expressway and Cisco TelePresence Video Communication Server VCS are telepresence video communication servers from Cisco that integrate with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication...
EMC RSA Authentication Manager Cross-Site Scripting Vulnerability
RSA Authentication Manager: is the platform behind RSA SecurID, utilized to centrally manage the RSA SecurID environment, including authentication methods, users, applications, and agents, across multiple physical sites. A cross-site scripting vulnerability exists in RSA Authentication Manager...
CVE-2016-0901
Cross-site scripting XSS vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0900...
CVE-2016-0900
Cross-site scripting XSS vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0901...
Advantech WebAccess Arbitrary Code Execution Vulnerability
WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. A security vulnerability exists in Advantech WebAccess versions prior to 8.1, which c...
Advantech WebAccess Information Disclosure Vulnerability (CNVD-2016-00433)
WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. An information disclosure vulnerability exists in Advantech WebAccess versions prior ...
Advantech WebAccess stack buffer overflow vulnerability (CNVD-2016-00434)
WebAccess HMI/SCADA software provides remote control and management, allowing users to easily view and configure automation devices in facility management systems, power stations and building automation systems. Multiple stack buffer overflow vulnerabilities exist in Advantech WebAccess versions...