MOXA EDS-G512E Cross-Site Scripting Vulnerability

Moxa EDS-G512E is an Ethernet switch device from Moxa. A cross-site scripting vulnerability exists in the management interface of the MOXA EDS-G512E version 5.1 build 16072215. A remote attacker can exploit this vulnerability to inject malicious code...

CVE-2017-13700

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface...

VulnCheck KEV: CVE-2017-18580

The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode...

UBUNTU-CVE-2017-10392

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

EyesOfNetwork web interface 'term' parameter SQL injection vulnerability

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A SQL injection vulnerability...

EyesOfNetwork web interface SQL injection vulnerability (CNVD-2017-33830)

EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A SQL injection vulnerability...

CVE-2017-10242

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2017-17505)

VirtualBox is cross-platform virtualization software for x86-based systems. A security vulnerability exists in the Core component implementation of Oracle VM VirtualBox versions prior to 5.1.24, which can be exploited by attackers to compromise the confidentiality, integrity, and availability of ...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2017-17507)

VirtualBox is cross-platform virtualization software for x86-based systems. A security vulnerability exists in the Core component implementation of Oracle VM VirtualBox versions prior to 5.1.24, which can be exploited by attackers to compromise system integrity and availability...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2017-17516)

VirtualBox is cross-platform virtualization software for x86-based systems. A security vulnerability exists in the Core component implementation of Oracle VM VirtualBox versions prior to 5.1.24, which can be exploited by attackers to compromise system confidentiality and availability...

Cisco Ultra Services Framework Unauthorized Access Vulnerability

Cisco Ultra Services Framework is an intelligent online service delivery platform from Cisco.Ultra Automation Service is one of the automation services. A security vulnerability exists in Cisco Ultra Services Framework for UAS versions prior to 5.0.3 and prior to 5.1. A remote attacker could...

CVE-2017-3589

Vulnerability in the MySQL Connectors component of Oracle MySQL subcomponent: Connector/J. Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise...

CVE-2017-0419

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

Cisco IOS XR Software Remote Denial of Service Vulnerability

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. A remote denial of service vulnerability exists in the Cisco IOS XR Software Releases 5.1.x, 5.2.x, and 5.3.x versions. ...

UBUNTU-CVE-2016-3837

service/jni/comandroidserverwifiWifiNative.cpp in Wi-Fi in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application that provides a MAC address with too few characters, aka internal bug 28164077...

CVE-2016-0847

The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502...

Apple OS X Server Information Disclosure Vulnerability

Apple OS X is an operating system from Apple. A security vulnerability in Wiki Server in versions of Apple OS X Server prior to 5.1 allows remote attackers to obtain sensitive information from Wiki pages...

Tollgrade SmartGrid LightHouse Sensor Management System Software Information Disclosure Vulnerability

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software is a Web-based smart grid lighthouse sensor management system from Tollgrade, Inc. A security vulnerability exists in Tollgrade SmartGrid LightHouse SMS Software versions prior to 5.1 and 4.1.0 Build 16. A remote attacker could...

CVE-2016-0864

Tollgrade SmartGrid LightHouse Sensor Management System SMS Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors...

Android Audio Component Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of the Audio component of Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, which can be exploited by remote attackers to obtain sensitive information...