Oracle Hospitality RES 3700 Remote Vulnerability

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation.Oracle Hospitality RES 3700 is one of the food and beverage management applications. A security vulnerability exists in the OPS Operations...

SAP NetWeaver AS JAVA XML External Entity Injection Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform, the platform can provide the development and operation environment for SAP applications. SAP NetWeaver AS Application Server Java is a run in NetWeaver and based on the Java programming language...

CVE-2017-1373

Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866...

Opmantek NMIS Cross-Site Scripting Vulnerability

Opmantek NMIS is an open source, scalable network management platform from Opmantek Australia. A cross-site scripting vulnerability exists in versions of Opmantek NMIS prior to 8.5.12G. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via SNMP...

CVE-2017-3094

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF processing engine. Successful exploitation could lead to arbitrary code execution...

IBM iNotes Information Disclosure Vulnerability

IBM iNotes also known as IBM Lotus iNotes is a set of Web-based e-mail software from IBM in the United States. The software helps different types of users online and offline users to effectively manage business-critical information and collaboration. A security vulnerability exists in IBM iNotes...

Adobe Digital Editions Memory Corruption Vulnerability

Adobe Digital Editions DE is a set of e-book reading and management software of the United States Ordoby Adobe. Through the software can open, read and manage PDF, XML, Flash files. A memory corruption vulnerability exists in Adobe DE 4.5.4 and earlier versions. A remote attacker can exploit this...

CVE-2017-1214

IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disclosure. IBM X-Force ID: 123854...

CVE-2016-2034

SQL injection vulnerability in ClearPass Policy Manager 6.5.x through 6.5.6 and 6.6.0...

IBM Maximo Asset Management HTTP Response Splitting Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. An HTTP respons...

IBM Maximo Asset Management Sensitive Information Disclosure Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A sensitive...

WordPress Markdown on Save Improved Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up a personal blog site.Markdown on Save Improved is one of the editor plugin. A cross-site scripting vulnerability exists in the posting...

CVE-2017-1092

IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers. IBM X-Force ID: 120390...

Wireshark NetScaler Denial of Service Vulnerability

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in the NetScaler file parser in Wireshark...

Synology Photo Station Directory Traversal Vulnerability

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology, a Chinese company. A directory traversal vulnerability exists in synophotodsmuser used in Synology Photo Station versions prior to 6.5.3-3226. A local attacker can exploit the vulnerabilit...

Gemalto SmartDiag Diagnosis Tool Buffer Overflow Vulnerability

The Gemalto SmartDiag Diagnosis Tool is a diagnostic tool developed by Gemalto in the Netherlands to diagnose the status of smart card readers. A stack buffer overflow vulnerability exists in Gemalto SmartDiag Diagnosis Tool version 2.5 and previous versions. A local attacker could exploit this...

CVE-2017-7229

PGP/MIME encrypted messages injected into a Vaultive O365 before 4.5.21 frontend via IMAP or SMTP have their Content-Type changed from 'Content-Type: multipart/encrypted; protocol="application/pgp-encrypted"; boundary="abc123abc123"' to 'Content-Type: text/plain' - this results in the encrypted...

YARA Denial of Service Vulnerability

YARA is a set of tools used to help software researchers identify and categorize malware samples. A denial of service vulnerability exists in the regex component in YARA 3.5.0. A remote attacker can exploit this vulnerability to cause a denial of service by mishandling a rule rule in the yrreexec...

MODX Revolution Directory Traversal Vulnerability (CNVD-2017-06899)

MODX Revolution is a PHP-based open source content management system CMS from the U.S. company MODX. The system supports online collaboration, search engine optimization SEO, add-ons and more. A directory traversal vulnerability exists in MODX Revolution version 2.5.7. The vulnerability arises du...

Stored Cross-Site Scripting Vulnerability at the Thinksaas Creation Repository

ThinkSAAS is a lightweight open source community system that can be used to build discussion groups, bbs and circles. A stored cross-site scripting vulnerability exists in Thinksaas version 2.5 at the creation repository, which can be exploited by remote attackers to inject arbitrary web script o...