Zurmo CRM Cross-Site Scripting Vulnerability (CNVD-2017-08089)

Zurmo CRM is the United States Zurmo company's set of open source PHP-based customer relationship management system CRM. Zurmo CRM suffers from a cross-site scripting attack vulnerability that stems from the program failing to adequately validate user input. An attacker could use this vulnerabili...

OpenVPN Access Server CRLF Injection Vulnerability

OpenVPN is a software package from the American company OpenVPN for creating encrypted tunnels for virtual private networks VPNs that use the OpenSSL library to encrypt data and control information.OpenVPN Access Server is a commercial paid version of OpenVPN. OpenVPN Access Server suffers from a...

Flexera Software FlexNet Manager Suite Local Elevation of Privilege Vulnerability

FlexNet Manager Suite is a comprehensive and proven next-generation hardware asset management, software asset management, certificate compliance and software certificate optimization solution from Flexera Software, USA. A local elevation of privilege vulnerability exists in Flexera Software FlexN...

Apple macOS Server User Enumeration Vulnerability

Apple Mac OS X is a specialized operating system developed by Apple for Mac computers. A user enumeration vulnerability exists in Apple macOS Server. An attacker exploits this vulnerability to obtain a valid username and launch further attacks...

Nextcloud Unauthorized Access Vulnerability

Nextcloud is a suite of open source self-hosted file synchronization and sharing communication application platform. An unauthorized access vulnerability exists in Nextcloud. An attacker could use this vulnerability to bypass certain security restrictions and obtain sensitive information, leading...

SAP SNOTE Unauthorized Operation Vulnerability

SAP Notes is an SAP knowledge base from SAP, Germany, which is a solution provided by SAP for a specific problem, operation, or configuration, and is made available to the customer in the form of a document. An unspecified security vulnerability exists in SAP SNOTE. An attacker could exploit this...

Google Pixel/Pixel XL Qualcomm USB Driver Information Disclosure Vulnerability

Google Pixel/Pixel XL are both a smartphone from the American company Google Google. Google Pixel/Pixel XL suffers from an information disclosure vulnerability. The vulnerability can be exploited by an attacker to gain access to potentially sensitive information, leading to further attacks...

CVE-2017-7474

It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, or to possibly conduct further attacks...

Advantech B + B SmartWorx MESR901 Authentication Bypass Vulnerability

Advantech B + B SmartWorx MESR901 is a Modbus gateway. An authentication bypass vulnerability exists in Advantech B + B SmartWorx MESR901. An attacker can exploit the vulnerability to carry out authentication mechanisms and perform unauthorized operations, leading to further attacks...

Nextcloud Server Content Spoofing Vulnerability (CNVD-2017-05596)

Nextcloud is a suite of open source self-hosted file synchronization and sharing communication application platform. A content spoofing vulnerability exists in Nextcloud Server. An attacker could exploit this issue to manipulate and spoof content, which could facilitate further attacks...

Unspecified Cross-Site Scripting Vulnerability in SAP NetWeaver Monitoring Application

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An unspecified cross-site scripting vulnerability exists in SAP NetWeaver Monitoring Application. The...

Palo Alto Networks Terminal Services Information Disclosure Vulnerability

Terminal Services Agent is a suite of terminal services agent programs from Palo Alto Networks, Inc. An information disclosure vulnerability exists in Palo Alto Networks Terminal Services. An attacker could exploit this vulnerability to obtain sensitive information and launch further attacks...

CVE-2016-9720

IBM QRadar 7.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM Reference : 1999533...

KDE kio and kdelibs Information Disclosure Vulnerability

KDE kio and kdelibs are both products of the KDE company. kdelibs was created on top of the Qt framework, which provides the framework and many features to develop KDE software. An information disclosure vulnerability exists in KDE kio prior to version 5.32 and kdelibs prior to version 4.14.30. A...

Cisco Prime Collaboration Assurance Information Leakage Vulnerability

Cisco Prime Collaboration Assurance is a video and voice services solution. A remote information leakage vulnerability exists in Cisco Prime Collaboration Assurance. An attacker could exploit this vulnerability to obtain sensitive information and cause further attacks...

IBM Security Key Lifecycle Manager Security Bypass Vulnerability

IBM Security Key Lifecycle Manager formerly known as Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A security bypass vulnerability exist...

Cisco Intrusion Prevention System Device Manager Information Leakage Vulnerability

Cisco Intrusion Prevention System is an intrusion prevention system. A remote information leakage vulnerability exists in Cisco Intrusion Prevention System Device Manager. An attacker could exploit this vulnerability to obtain sensitive information and launch further attacks...

Jenkins Information Disclosure Vulnerability (CNVD-2017-01344)

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . An...

Alaris 8015 PC Unit Information Disclosure Vulnerability

The Alaris 8015 PC unit is the centerpiece of the Alaris System, an American BD system that provides a user-common interface for programming IV infusions. An information disclosure vulnerability exists in the Alaris 8015 PC unit. An attacker could exploit the vulnerability to obtain sensitive...

Google Android Information Disclosure Vulnerability (CNVD-2017-01564)

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Google Android suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain potentially sensitive information, and the...