GLPI front/devicesoundcard.php file SQL injection vulnerability

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. An SQL injection vulnerability exists in the front/devicesoundcard.php...

Oracle PeopleSoft Enterprise PRTL Interaction Hub Remote Vulnerability (CNVD-2017-27314)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PRTL Interaction Hub is one of the enterprise and Customer Interaction...

Ektron Content Management System Cross-Site Scripting Vulnerability

Ektron Content Management System CMS is an enterprise-class Web content management system CMS from Ektron, Inc. The system supports WYSIWYG editors, content layout and drag-and-drop operations. A cross-site scripting vulnerability exists in versions of Ektron CMS prior to 9.1.0.184 SP3...

CVE-2017-7910

A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An attacker may be able to run arbitrary code by remotely exploiting an executable to perform a denial-of-service attack...

CVE-2017-3570

Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: eSettlements. The supported version that is affected is 9.1. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...

Novell eDirectory Security Bypass Vulnerability

Novell eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from Novell, USA. The platform provides authentication policies, data backup and recovery services, data disaster recovery and other functions. A...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11868)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions, which stems from the program failing to properly set account lockout. A remote attacker can exploit this vulnerabili...

CVE-2016-5048

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...

ReadyDesk Security Bypass Vulnerability

ReadyDesk is a Web-based helpdesk software solution from ReadyDesk, Inc. A security bypass vulnerability exists in ReadyDesk version 9.1, which stems from the use of hard-coded encryption for user credentials. An attacker could exploit the vulnerability to obtain a password...

ReadyDesk SQL Injection Vulnerability

ReadyDesk is a Web-based helpdesk software solution from ReadyDesk, Inc. A SQL injection vulnerability exists in ReadyDesk version 9.1, which can be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying database...

Apple iOS WebKit Information Disclosure Vulnerability (CNVD-2016-01843)

Apple iOS is the operating system used by Apple for a number of smart devices. WebKit is a set of open-source web browser engines developed by KDE, Apple, Google and other companies, and is currently used by browsers such as Apple Safari and Google Chrome. Versions of iOS prior to 9.3 and Safari...

Apple Safari Interface Forgery Vulnerability

Apple Safari is a web browser developed by Apple, Inc. and is the default browser that comes with the Mac OS X and iOS operating systems. A security vulnerability exists in Apple Safari versions prior to 9.1. An attacker can exploit the vulnerability to spoof the user interface with the help of a...

CVE-2016-0412

Unspecified vulnerability in the PeopleSoft Enterprise SCM eProcurement component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect integrity via unknown vectors related to Manage Requisition Status...

Apple iOS Memory Corruption Vulnerability (CNVD-2015-07163)

IOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in WebKit, a version of Apple iOS prior to 9.1. A remote attacker could execute arbitrary code or launch a denial-of-service attack memory corruption or application crash via a constructed website...

Apple iOS Arbitrary Code Execution Vulnerability

Apple iOS is an operating system for handheld devices developed by Apple Inc. An arbitrary code execution vulnerability exists in Apple iOS versions prior to 9.1, OS X versions prior to 10.11.1. It allows remote attackers to execute arbitrary code via an unknown network connection request...

Apple iOS/OS X OpenGL Memory Corruption Vulnerability

OS X formerly Mac OS X is the latest version of Apple's proprietary operating system for the Macintosh computer. iOS is an operating system developed by Apple for mobile devices. A security vulnerability exists in the OpenGL implementation in Apple iOS versions prior to 9.1 and Apple OS X version...

Apple iOS Information Disclosure Vulnerability

iOS is an operating system developed by Apple for mobile devices. Apple iOS versions prior to 9.1 mishandled Notification Center by changing the lock screen display settings, allowing local attackers to obtain sensitive information by searching for phone calls or message notifications after the...

PT-2014-3802 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 9.1.3 and earlier Description: The issue allows remote attackers to bypass authentication and change trust relationships by injecting a Certificate Trust List CTL file. This could enable...

PT-2008-3518 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM DB2 versions 8.0 through 8.0 FP15 IBM DB2 versions 9.1 through 9.1 FP3 IBM DB2 versions 9.5 through 9.5 FP0 Description: The issue allows remote authenticated users to execute arbitrary code via unknown vectors in the ADMIN SP C2 procedur...