ABB Fox515T embedded Web server local file inclusion vulnerability

ABB Fox515T is a multifunctional optical transmission device from ABB Switzerland. embedded web server is one of the embedded web servers. A local file inclusion vulnerability exists in the embedded web server of the ABB Fox515T version 1.0. A remote attacker can exploit this vulnerability to...

VMware vCenter Server Information Disclosure Vulnerability (CNVD-2017-33977)

VMware vCenter Server provides a centralized, scalable platform for managing virtual infrastructure. An information disclosure vulnerability exists in VMware vCenter Server versions 5.5, 6.0, and 6.5. A remote user can trigger the URL authentication vulnerability by sending a specially crafted PO...

VMware vCenter Server Denial of Service Vulnerability (CNVD-2017-33976)

VMware vCenter Server provides a centralized, scalable platform for managing virtual infrastructure. A denial of service vulnerability exists in VMware vCenter Server versions 5.5, 6.0, and 6.5. A remote user can cause the target service to crash by sending specially crafted LDAP packets...

CVE-2017-12083

An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1. A specially crafted set of packets can make the Disney Circle dump strings from an internal database into an HTTP response. An attacker needs network connectivity to the...

OpenEMR elevation of privilege vulnerability (CNVD-2017-35899)

OpenEMR is an open source medical management system maintained by the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing and medical billing requests. An elevation of privilege vulnerability exists in versions of OpenEMR pri...

Thornberry Ndoc Information Disclosure Vulnerability

Thornberry Ndoc is a home care management software from Thornberry USA. The software supports features such as storing and importing medical records, online assessments, and creating medical orders. A security vulnerability exists in versions of Thornberry Ndoc prior to 8.0 that stems from the...

Circle with Disney Remote Code Execution Vulnerability (CNVD-2017-33180)

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A remote code execution vulnerability exists in the database update feature in Circle with Disney version 2.0.1. The vulnerability can b...

Circle with Disney Routing Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A routing vulnerability exists in the cloud infrastructure in Circle with Disney version 2.0.1. An attacker can exploit this vulnerabili...

CVE-2017-10263

Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM subcomponent: UIF Open UI. Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI Framework. Successful...

Oracle Siebel CRM Siebel UI Framework Component Unauthorized Operation Vulnerability (CNVD-2017-32189)

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions , which includes sales management , marketing management , customer service systems , call centers and other modules.Siebel UI Framework is one of the framework components based on the...

Oracle Communications WebRTC Session Controller Denial of Service Vulnerability

Oracle Communications Applications is a suite of applications for rapidly delivering and monetizing digital life communications from Oracle Corporation.Oracle Communications WebRTC Session Controller is one of the session controller components. A security vulnerability exists in the Security Gson...

P3Scan Design Vulnerabilities

P3Scan is a proxy server for email that scans for worms, Trojans and other malicious emails. A security vulnerability exists in daemon in P3Scan 3.0rc1 and earlier versions, which stems from the creation of the p3scan.pid file after the program has downgraded an account to non-root privileges. A...

CVE-2017-0810

A remote code execution vulnerability in the Android media framework libmpeg2. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38207066...

UBUNTU-CVE-2017-0809

A remote code execution vulnerability in the Android media framework libstagefright. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62673128...

CVE-2017-1483

IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 128621...

CVE-2017-1527

IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 130156...

CVE-2017-1362

IBM Security Identity Manager Adapters 6.0 and 7.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 126801...

Pragyan CMS SQL Injection Vulnerability (CNVD-2017-34576)

Pragyan CMS is a multi-user, modular PHP and MySQL based Content Management System CMS. The system supports custom built-in frameworks, user group rights management, search engine optimization and more. A SQL injection vulnerability exists in Pragyan CMS version 3.0. A remote attacker can exploit...

Diving Log dive.xml File Information Disclosure Vulnerability

Diving Log is a dive log management software. The software supports data import, log printing and log sharing. A security vulnerability exists in Diving Log version 6.0. A remote attacker can exploit this vulnerability to view local files with the help of a specially crafted dive.xml file...

Secure Mail does not sync emails after upgrading to version 10.6.0

Emails are not syncing for users after the Secure Mail update to 10.6.0. We will see the following Socket errors in the logs: 2017-07-25T06:17:37.266-0400 AGTunneler INFO 4 -AGSocket connect:withPort: -AGSocket connect:withPort:: CallOriginalconnect errno = 36 - 'Operation now in progress', fd = ...