CVE-2018-2442

In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid...

SQL Injection Vulnerability in MetInfo Website Backend

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A SQL injection vulnerability exists in the backend of MetInfo version 6.1.0 website. An attacker can exploit this vulnerability to obtain sensitive database information...

Micro Focus NetIQ eDirectory Open Redirect Vulnerability

Micro Focus NetIQ eDirectory is an identity management infrastructure platform from Micro Focus UK that combines identity management architecture and directory services technology. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. An ope...

HPE CentralView Fraud Risk Management Remote HOST Header Attack Vulnerability

HPE CentralView Fraud Risk Management is an end-to-end solution for addressing fraud control issues. A remote HOST header attack vulnerability exists in HPE CentralView Fraud Risk Management CV versions prior to 6.1. No detailed vulnerability details are provided at this time...

Google Android Media framework remote code execution vulnerability (CNVD-2018-18769)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in the Media framework in Android versions 8.0 and 8.1. A...

CVE-2018-7070

HPE has identified a remote disclosure of information vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

CVE-2018-7068

HPE has identified a remote HOST header attack vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

CVE-2018-7069

HPE has identified a remote unauthenticated access to files vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

CVE-2017-8992

HPE has identified a remote privilege escalation vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

CVE-2017-8991

HPE has identified a cross site scripting XSS vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

CVE-2018-9866

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...

McAfee Drive Encryption TPM autoboot authentication bypass vulnerability

McAfee Drive Encryption MDE is a suite of full disk encryption software from the American company McAfee. The software is mainly used to protect data on tablets, laptops and desktop computers with Microsoft Windows to prevent the loss of sensitive data.TPM autoboot is one of the TPM autoboot...

Foxit Reader Type Obfuscation Remote Code Execution Vulnerability (CNVD-2018-15069)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

Lenovo XClarity Administrator Parameter Injection Vulnerability

Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The solution supports simplified infrastructure management, faster server response, and improved performance of Lenovo server systems. A parameter injection vulnerability exists in the Web API in...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14450)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of events in Foxit Reader 9.1.0.5096 and earlier versions for Windows platforms, where the program fails to verify the...

PT-2018-12556 · Wuzhi · Wuzhi Cms

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A persistent XSS issue allows remote attackers to inject arbitrary web script or HTML via the formnickname parameter to the "index.php?m=core&f=set&v=sendmail" API endpoint. The XSS payload is triggered wh...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2018-14090)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in WUZHI CMS version 4.1.0. A remote attacker can inject arbitrary Web script or HTML by sending the 'formnickname'...

DEBIAN-CVE-2018-14454

An issue was discovered in libgig 4.1.0. There is an out-of-bounds read in the function RIFF::Chunk::Read in RIFF.cpp...

CVE-2018-3046

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker with network...

CVE-2018-3043

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...