10774 matches found
sourcebans-pp cross-site scripting vulnerability
sourcebans-pp a.k.a. SourceBans++ is an advanced management system for the Source engine a 3D game engine by the Sourcebans team. The system allows system administrators to set administrative privileges for all users on the server and to terminate games on the server over the network. A cross-sit...
ManageEngine ServiceDesk Plus < 9.0 Access Bypass Vulnerability
ManageEngine ServiceDesk Plus is prone to an access bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GUEK IPTV PLUS - External URLs, Unsafe deleting, WebView JavaScript enabled vulnerabilities
HackApp vulnerability scanner discovered that application GUEK IPTV PLUS published at the 'play' market has multiple vulnerabilities...
CVE-2017-2137
ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests...
CVE-2017-2137
ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests...
Design/Logic Flaw
ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests...
CVE-2017-2137
ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests...
CVE-2017-2137
CVE-2017-2137 affects NETGEAR ProSAFE Plus Configuration Utility prior to 2.3.29. The Vulnerability is an improper access control flaw that allows remote attackers to bypass access restrictions and modify switch configurations via SOAP requests. Affected component is the Windows-based Configurati...
WP Support Plus Responsive Ticket System 7.1.3 – WordPress Plugin – Sql Injection
Homepage: https://wordpress.org/plugins/wp-support-plus-responsive-ticket-system/ Description: Type user access: any user. $POST‘catid’ is not escaped. Is accessible for any user. File / Code: Path: /wp-content/wp-support-plus-responsive-ticket-system/includes/admin/wpspgetCatName.php Line: 4...
Google Chrome International Components for Unicode for C/C++ Denial of Service Vulnerability
Google Chrome is a web browser developed by Google, Inc.International Components for Unicode ICU for C/C++ is a Unicode-supported, software internationalization, globalization C/C++ library. ICU for C/C++ in Google Chrome versions prior to 40.0.2214.91 A security vulnerability exists in the Regul...
CVE-2017-3486
Vulnerability in the SQLPlus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQLPlus executes to compromise...
CVE-2017-3486
Vulnerability in the SQLPlus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQLPlus executes to compromise...
Design/Logic Flaw
Vulnerability in the SQLPlus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQLPlus executes to compromise...
CVE-2017-3486
Vulnerability in the SQLPlus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQLPlus executes to compromise...
CVE-2017-3486
Vulnerability in the SQLPlus component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Difficult to exploit vulnerability allows high privileged attacker having Local Logon privilege with logon to the infrastructure where SQLPlus executes to compromise...
CVE-2017-3486
CVE-2017-3486 affects Oracle Database Server’s SQLPlus component. Affected are 11.2.0.4 and 12.1.0.2. The vulnerability is difficult to exploit but can allow a high-privileged attacker with Local Logon privilege (and user interaction) to compromise SQL Plus, with potential impact on confidentiali...
Code injection
Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates...
CVE-2016-4840
Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates...