CVE-2017-10261

Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 11.2.0.4 and 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with logon to the infrastructure where XML Database executes to...

3CX Phone System Directory Traversal Vulnerability

3CX Phone System is a unified communications solution that includes web conferencing, IP telephony, and cell phone clients.Management Console is one of the management console programs. A directory traversal vulnerability exists in Management Console in 3CX Phone System version 15.5.3554.1. An...

mysql: Server: Optimizer unspecified vulnerability (CPU Apr 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple...

OpenText Document Sciences xPression Directory Traversal Vulnerability

OpenText Document Sciences xPression formerly known as EMC Document Sciences xPression is a document output management and customer communication solution from OpenText Canada. The solution integrates an organization's Customer Relationship Management CRM, Enterprise Content Management ECM, and...

EMC AppSync Host Plug-in Denial of Service Vulnerability

EMC AppSync is a suite of data protection software from EMC Corporation USA. The software provides simple, self-service, Service Level Agreement SLA-driven data protection and storage management for EMC VNX and EMC VMAX storage.Host Plug-in is one of the host plug-ins. A denial of service...

CVE-2017-1527

IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 130156...

Trend Micro Web Security Virtual Appliance Remote Code Execution Vulnerability

Trend Micro Web Security Virtual Appliance is a Web security gateway from Trend Micro that provides dynamic, integrated security protection for enterprise networks against Web-based threats. A security vulnerability exists in Trend Micro Web Security Virtual Appliance version 6.5 in the process o...

Micro Focus VisiBroker Read Across Boundaries Vulnerability

Micro Focus VisiBroker is a CORBA environment for developing, deploying and managing distributed applications from Micro Focus, UK. An out-of-bounds read vulnerability exists in Micro Focus VisiBroker version 8.5. No information about this vulnerability is available at this time...

mysql: Logging unspecified vulnerability (CPU Jan 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Logging. Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQ...

Cross-Site Scripting Vulnerability in NexusPHP V1.5

NexusPHP is a resource sharing community solution written in PHP developed by the Nexus team in China. A cross-site scripting vulnerability exists in NexusPHP version 1.5. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

CVE-2016-5795

An XXE issue was discovered in Automated Logic Corporation ALC Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and prior. An attacker could enter malicious input to WebCTRL, i-Vu, or SiteScan Web through a weakly configured XML parser...

SUSE-SU-2017:2315-1 Security update for libreoffice

LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements: Writer: - New 'Go to Page' dialog for quickly jumping to another page. - Support for 'Table Styles'. - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc: - New...

CVE-2017-1447

IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128172...

CVE-2016-2969

IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these messages. IBM X-Force ID: 113850...

CVE-2016-2970

IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: 113851...

IBM Sametime Media Server Information Disclosure Vulnerability

IBM Sametime Media Server is a set of media servers for Sametime chat and conferencing from IBM in the United States. An information disclosure vulnerability exists in IBM Sametime Media Server versions 9 and 8.5, which stems from detailed application information appearing in error messages. An...

libbpg MulticoreWare x265 Integer Overflow Vulnerability

libbpg is a library of image formats.MulticoreWare x265 is used in one of them a HEVC encoder developed by the American company MulticoreWare. An integer overflow vulnerability exists in pixel-a.asm in libbpg and other products for MulticoreWare x265 2.5 and earlier. An attacker can exploit this...

IBM Sametime Meetings Server Denial of Service Vulnerability (CNVD-2017-26408)

IBM Sametime is a set of next-generation social communication tools from IBM in the United States. The tool helps users realize real-time business collaboration by integrating audio voice, data, and video.Sametime Meeting Server is one of the Web conferencing components used in the Sametime chat...

CVE-2017-9640

A Path Traversal issue was discovered in Automated Logic Corporation ALC ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An...

HP Integrated Lights-out 4 Remote Code Execution Vulnerability

HP Integrated Lights-Out 4 iLO 4 is an embedded server management technology from Hewlett-Packard HP in the United States that monitors and maintains server operations, remote control of servers, and more through an integrated remote management port. A security vulnerability exists in versions of...