4049 matches found
jQuery Denial of Service Vulnerability
jQuery is an American programmer John Resig developed a set of open source , cross-browser JavaScript library . The library simplifies the operation between HTML and JavaScript , and has a modular , plug-in extensions and other features . A denial of service vulnerability exists in versions of...
Oracle Siebel CRM Siebel Engineering - Unspecified Vulnerability in Installer and Deployment Component
Oracle Siebel CRM is a set of customer relationship management solutions from Oracle USA, which includes modules for sales management, marketing management, customer service system, call center, etc. Siebel Engineering - Installer and Deployment is one of the Siebel Engineering Installer and...
Unspecified Vulnerability in Oracle Financial Services Profitability Management Component
Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management, of which Oracle Financial Services Profitability Management is a financial services profitability management component. Oracle Financial Services...
Unspecified Vulnerability in Oracle Financial Services Market Risk Component
Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management.Oracle Financial Services Market Risk is one of the financial services market risk components. A security vulnerability exists in the User Interface...
Unspecified Vulnerability in Oracle Financial Services Analytical Applications Reconciliation Framework Component
Oracle Financial Services Applications is Oracle's suite of financial services software for core banking, online banking, and property management.Oracle Financial Services Analytical Applications Reconciliation Framework is one of the financial services analytical framework. A security...
CVE-2018-2728
Vulnerability in the Oracle Financial Services Funds Transfer Pricing component of Oracle Financial Services Applications subcomponent: User Interface. Supported versions that are affected are 6.1.x and 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access vi...
CVE-2018-2726
Vulnerability in the Oracle Financial Services Market Risk component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2018-2714
Vulnerability in the Oracle Financial Services Market Risk component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2018-2682
Vulnerability in the Oracle Financial Services Liquidity Risk Management component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...
CVE-2018-2626
Vulnerability in the Oracle Financial Services Balance Sheet Planning component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...
Web Security Dog (Apache Edition) V4.0 suffers from SQL Injection Vulnerability
Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition V4.0 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability...
SQL Injection Vulnerability in DuxCms 3.0
DuxCms is a small and medium-sized website builder based on PHP+MYSQL and written in CANPHP framework. DuxCms 3.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
PT-2019-8042 · None +2 · Libtiff +2
Name of the Vulnerable Software and Affected Versions: LibTIFF version 4.0.8 Description: The issue allows attackers to cause a denial of service due to memory consumption. It is demonstrated by files such as tif open.c, tif lzw.c, and tif aux.c. However, third parties were unable to reproduce th...
Microsoft ASP.NET Core Elevation of Privilege Vulnerability (CNVD-2018-00899)
Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. An elevation of privilege vulnerability exists in Microsoft ASP.NET Core versio...
Google Android System Component Denial of Service Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A denial of service vulnerability exists in the Google Android System component version 8.0. A remote attacker could exploit this vulnerability to cause a denial of service...
CVE-2017-15892
Multiple cross-site scripting XSS vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via 1 COMMAND, 2 COMMANDS INSTRUCTION, or 3 DESCRIPTION parameter...
Biometric Shift Employee Management System File Read Limit Bypass Vulnerability
Biometric Shift Employee Management System is an employee management system. A file read restriction bypass vulnerability exists in Biometric Shift Employee Management System 3.0. A remote attacker can bypass the expected file read restriction via a user=download request with pathname in the path...
CVE-2017-17876
Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in the path parameter...
JBPM KIE Workbench Cross-Site Scripting Vulnerability
JBPM KIE Workbench is based on ASL Apache License Version 2.0 and EULA JBoss End User License Agreement agreement scalable open source executable process language framework. A cross-site scripting vulnerability exists in version 6.0.x of JBPM KIE Workbench. A remote attacker can exploit this...