CVE-2018-18790

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/specialadd.php via a zxbigclassid cookie. This needs an admin user login...

zzcms SQL Injection Vulnerability (CNVD-2018-26013)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the ajax/zs.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of pxzs cookie...

Webiness Inventory Arbitrary File Upload Vulnerability

Webiness Inventory is a set of PHP language development , Web-based inventory management system . A security vulnerability exists in the protected/library/ajax/WsSaveToModel.php file in Webiness Inventory version 2.3. A remote attacker can exploit this vulnerability to upload arbitrary files with...

zzcms SQL Injection Vulnerability (CNVD-2018-26016)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zt/top.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql...

Open STA Manager Arbitrary File Download Vulnerability

Open STA Manager is a free, open source web performance testing tool. An arbitrary file download vulnerability exists in Open STA Manager version 2.3, which can be exploited by an attacker to download arbitrary files...

CVE-2018-17447

An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4...

CVE-2018-18420

Cross-Site Request Forgery CSRF vulnerability was discovered in the 8.3 version of Zenario Content Management System via the admin/organizer.ajax.php?path=zenariocontent%2Fpanels%2Fcontent URI...

HPE Intelligent Management Center PLAT Remote Code Execution Vulnerability

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability exists in HPE iMC PLAT versions prio...

spring-framework: Address partial fix for CVE-2018-1270

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user or attacker can craft a message to...

CVE-2018-7110

A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework SGF version 4.2, 4.3. A race condition under high load in SGF exists where SGF transferred different parameter to the enabler...

CVE-2018-3272

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones Virtualized NIC Driver. The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes t...

CVE-2018-3264

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successf...

CVE-2018-2922

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

IBM QRadar Incident Forensics Information Disclosure Vulnerability

IBM QRadar Incident Forensics is a suite of security forensic investigation software from IBM. The software supports in-depth forensic investigations of suspected malicious network security incidents, and the repair of network security vulnerabilities. A security vulnerability exists in IBM QRada...

CVE-2018-1649

IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 144655...

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-20731)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 9.3, which stems from the program's failure to properly handle the properties of the Annotation...

Foxit Reader and PhantomPDF Memory Misreference Vulnerability (CNVD-2018-20728)

Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit PhantomPDF is a commercial version. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 9.3, which stems from the program's failure to properly handle the properties of the Annotation...

CVE-2018-11075

RSA Authentication Manager versions prior to 8.3 P3 contain a reflected cross-site scripting vulnerability in a Security Console page. A remote, unauthenticated malicious user, with the knowledge of a target user's anti-CSRF token, could potentially exploit this vulnerability by tricking a victim...

File Upload Vulnerability in JEECMS v9.3

JEECMS is Jiangxi Jinlei Technology Development Co., Ltd. developed a support for WeChat small program, WeChat public number / service number, column model, content model cross-customization, as well as with the payment and financial settlement of the content of the e-commerce as one of the conte...

CVE-2018-15611

A vulnerability in the local system administration component of Avaya Aura Communication Manager can allow an authenticated, privileged user on the local system to gain root privileges. Affected versions include 6.3.x and all 7.x version prior to 7.1.3.1...