HPE Intelligent Management Center PLAT Arbitrary Code Execution Vulnerability (CNVD-2017-216955)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. An arbitrary code execution...

HPE Intelligent Management Center PLAT Arbitrary Code Execution Vulnerability (CNVD-2017-21564)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. An arbitrary code execution...

HPE Intelligent Management Center PLAT Arbitrary Code Execution Vulnerability (CNVD-2017-21581)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. An arbitrary code execution...

HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2017-21763)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability...

HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability (CNVD-2017-21761)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18124)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Java SE 8u131 has a security vulnerability in its implementation that allows an attacker to exploit...

UBUNTU-CVE-2017-10067

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successfu...

Arbitrary File Download Vulnerability in WeADMIN ITOSS IT Service Management Platform

WeADMIN ITOSS is a network management software. An arbitrary file download vulnerability exists in the WeADMIN ITOSS IT Service Management Platform, which can be exploited by attackers to download system files...

Command Injection

Overview Affected versions of pidusage pass unsanitized input to childprocess.exec, resulting in arbitrary code execution in the ps method. This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX. Windows and Linux are not vulnerable. Proof of Concept var pid = require'pidusage'...

CVE-2016-7055

There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that handles input lengths divisible by, but longer than 256 bits. Analysis suggests that attacks against RSA, DSA and DH private keys are impossible. This is...

Moodle Information Disclosure Vulnerability (CNVD-2017-04096)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. Moodle suffers from an information disclosure vulnerability. An attacker could exploit...

Vulnerability of the Java Platform software platform, which allows a perpetrator to trigger a service failure

The vulnerability of the 2D software platform of Java exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to cause the system to become unresponsive or, in rare cases, to crash through network packets...

EC-CUBE Server-Side Request Forgery Vulnerability

LOCKON EC-CUBE is an open source e-commerce website building platform developed by LOCKON Co. The platform supports product login, user evaluation, artwork layout and so on. A server-side request forgery vulnerability exists in EC-CUBE version 2.12.6en-p1, which can be exploited by remote attacke...

Cisco Aironet Access Points Platform Privilege Vulnerability

Cisco Aironet Access Points is a set of wireless access point devices from the American company Cisco Cisco. A privilege extraction vulnerability exists in the Cisco Aironet Access Points platform. A local attacker could exploit this vulnerability to gain root privileges on the device...

SAP HANA Security Bypass Vulnerability

SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions, users can directly query and analyze a large amount of real-time business data. A security bypass vulnerability exists in SAP HANA. An attacker could exploit this vulnerability t...

Adobe Flash Player Competitive Conditions Vulnerability

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A competitive condition vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability t...

Adobe Flash Player Memory Misreference Vulnerability (CNVD-2016-04864)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...

PowerDNS Zone Transfer Data Restriction Denial of Service Vulnerability

PowerDNS is a cross-platform open source DNS service component , it supports the use of Access mdb files in Windows systems to record DNS information , in Linux/Unix systems use MySQL to record DNS information . A denial-of-service vulnerability exists in the PowerDNS server, which stems from the...

The vulnerability of the JRockit software platform, which allows a malicious actor to compromise data accessibility remotely.

The vulnerability of the JRockit software platform allows a malicious actor to compromise data accessibility by using the JSSE component...

The vulnerability of the Java Platform software platform allows a remote attacker to compromise the confidentiality of protected information.

The vulnerability of the Java SE software platform allows a malicious actor to compromise data confidentiality by using the Swing subcomponent...