CVE-2017-12511

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version PLAT 7.3 E0504 was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 E0506 or any subsequent version...

OMRON NS Device Authentication Bypass Vulnerability

OMRON NS devices is a touch screen HMI programming device from Omron. A security vulnerability exists in OMRON NS devices versions 1.1 through 1.3. A remote attacker can exploit this vulnerability by sending a direct request to an .html file to bypass authentication...

Atlassian Confluence Server Cross-Site Scripting Vulnerability (CNVD-2018-03442)

Atlassian Confluence Server is a suite of professional enterprise knowledge management and collaboration software from Atlassian Australia, which can also be used to build an enterprise WiKi. the software enables collaboration and knowledge sharing amongst team members. A cross-site scripting...

phpyun v4.3.1 Beta has a reinstallation vulnerability

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. A reinstallation vulnerability exists in phpyun v4.3.1 Beta. Allows attackers to exploit the vulnerability to reinstall the system...

NetIQ Access Manager Arbitrary Code Execution Vulnerability

NetIQ Access Manager NAM is a set of resource access control solutions from American NetIQ. The solution provides multiple authentication, data encryption, single sign-on and SSL VPN for local and remote users.Identity Server is one of the authentication servers. A security vulnerability exists i...

Advantech WebAccess Arbitrary File Upload Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. An arbitrary file upload vulnerability exists in versions ...

CVE-2017-16736

An Unrestricted Upload Of File With Dangerous Type issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows a remote attacker to upload arbitrary files...

Advantech WebAccess Denial of Service Vulnerability (CNVD-2018-00673)

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A denial of service vulnerability exists in Advantech...

Advantech WebAccess stack buffer overflow vulnerability (CNVD-2018-00671)

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow vulnerability exists in versions...

Advantech WebAccess Path Traversal Vulnerability

Advantech WebAccess formerly known as BroadWin WebAccess is a set of HMI/SCADA software based on browser architecture from Advantech. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A path...

CVE-2017-11296

An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting vulnerability in Apache Sling Servlets Post 2.3.20 has been resolved in Adobe Experience Manager...

Open Ticket Request System Agent Frontend Information Disclosure Vulnerability

Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and service personn...

SAP Plant Connectivity Arbitrary Code Execution Vulnerability

SAP Plant Connectivity PCo is a set of next-generation, high-performance production plant connectivity software from SAP, which can communicate with different industrial software platforms. A security vulnerability exists in SAP PCo versions 2.3 and 15.0. A remote attacker could exploit the...

Ingenious School Management System SQL Injection Vulnerability

Ingenious School Management System is a web-based school management system. The system supports adding courses, posting grades and managing teachers. A SQL injection vulnerability exists in the /view/friendprofile.php file in Ingenious School Management System version 2.3.0. A remote attacker can...

IBM OpenPages GRC Platform Information Disclosure Vulnerability (CNVD-2017-34238)

The IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms from IBM USA for managing enterprise risk and compliance challenges. The platform provides a set of core services and functional components across the risk and compliance domains, including operational risk,...

IBM OpenPages GRC Platform Information Disclosure Vulnerability (CNVD-2017-34430)

IBM OpenPages GRC Platform is a suite of platforms for managing enterprise risk and compliance from IBM in the United States. The platform provides a set of core services and functional components that cover the risk and compliance domain including operational risk, policy and compliance, financi...

Catalyst Mahara Duplicate Session Header Vulnerability

Catalyst Mahara is a social networking system from Catalyst IT in New Zealand. The system includes a blog, resume builder, file manager, and more. A security vulnerability exists in Catalyst Mahara versions 15.04 prior to 15.04.7 and 15.10 prior to 15.10.3 using PHP version 5.3. An attacker could...

CVE-2017-3933

Embedding Script XSS in HTTP Headers vulnerability in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack...

HP Intelligent Management Center Arbitrary File Download Vulnerability (CNVD-2017-33197)

HP Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services, and users. imc SOM is one of the service operation and...

libzip '_zip_read_eocd64' function denial of service vulnerability

libzip is a C library for reading, creating and modifying zip archives developed by software developers Dieter Baron and Thomas Klausner. A security vulnerability exists in the 'zipreadeocd64' function of the zipopen.c file in versions of libzip prior to 1.3.0. A remote attacker can exploit this...