VMware AirWatch Console Cross-Site Request Forgery Vulnerability

VMware AirWatch is a console application for the VMware AirWatch Console AWC, a suite of enterprise mobility management solutions from VMware, Inc. A cross-site request forgery vulnerability exists in VMware AWC versions 9.2.x and 9.1.x. The vulnerability stems from the program failing to...

CVE-2018-5445

A Path Traversal issue was discovered in Advantech WebAccess/SCADA versions prior to V8.220170817. An attacker has read access to files within the directory structure of the target device...

MC RSA Authentication Manager Security Console SQL Injection Vulnerability

EMC RSA Authentication Manager is a centralized binary authentication software from EMC. The software allows centralized management of binary authentication, security tokens, methods, and users across physical sites.Security Console is one of the security console programs. A SQL injection...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise FSCM Component (CNVD-2018-01718)

Oracle PeopleSoft is a set of enterprise human capital management solutions from Oracle, which provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise FSCM is one of the financial and supply chain management components. A security...

CVE-2017-14097

An improper access control vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to decrypt contents of a database with information that could be used to access a vulnerable system...

Oracle VM VirtualBox Elevation of Privilege Vulnerability (CNVD-2018-02061)

Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. A security vulnerability exists in the Oracle VM VirtualBox component of Oracle Virtualization, versions...

CVE-2017-16666

Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file. NOTE: this issue can be exploited without authentication by leveraging the user registration feature...

Horde Groupware SQL Injection Vulnerability

Horde Groupware is an enterprise browser based on the Communication Suite from Horde USA. The browser supports sending and receiving e-mail, managing and sharing calendars, contacts and tasks, and more. A SQL injection vulnerability exists in Horde Groupware 5.2.22 and earlier versions. A remote...

DEBIAN-CVE-2017-10869

Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors...

IBM Sterling File Gateway Security Bypass Vulnerability

IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. A security bypass vulnerability exists in IBM Sterling File...

IBM Sterling File Gateway Cross-Site Scripting Vulnerability

IBM Sterling File Gateway is a suite of file transfer software from IBM in the United States. The software integrates different centers of file transfer activity and facilitates the secure exchange of file-based data over the Internet. A cross-site scripting vulnerability exists in IBM Sterling...

VMware AirWatch Console Cross-Site Scripting Vulnerability

VMware AirWatch is an enterprise mobility management solution from VMware. VMware AirWatch Console is one of the console applications.A cross-site scripting vulnerability exists in VMware AirWatch Console version 9.x prior to 9.2.0. A remote attacker could exploit the vulnerability to redirect...

VMware AirWatch Console Security Bypass Vulnerability

VMware AirWatch is a console application for the VMware AirWatch Console, a suite of enterprise mobility management solutions from VMware. A security bypass vulnerability exists in VMware AirWatch Console version 9.x prior to 9.2.0. A remote attacker could exploit the vulnerability to write...

IBM OpenPages GRC Platform Information Disclosure Vulnerability (CNVD-2017-34238)

The IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms from IBM USA for managing enterprise risk and compliance challenges. The platform provides a set of core services and functional components across the risk and compliance domains, including operational risk,...

IBM OpenPages GRC Platform Information Disclosure Vulnerability (CNVD-2017-34430)

IBM OpenPages GRC Platform is a suite of platforms for managing enterprise risk and compliance from IBM in the United States. The platform provides a set of core services and functional components that cover the risk and compliance domain including operational risk, policy and compliance, financi...

IBM Infosphere BigInsights Clickjacking Vulnerability

IBM InfoSphere BigInsights is a suite of software platforms for storing and analyzing "Big Data" from IBM in the United States. The platform provides solutions for managing and analyzing massive amounts of structured and unstructured data. A security vulnerability exists in IBM Infosphere...

EMC Authentication Manager Cross-Site Scripting Vulnerability

EMC RSA Authentication Manager is a centralized binary authentication software from EMC. The software centralizes the management of binary authentication, security tokens, methods and users across physical sites. A cross-site scripting vulnerability exists in EMC RSA Authentication Manager 8.2 SP...

CVE-2017-15947

Simple ASC Content Management System v1.2 has XSS in the location field in the sign function, related to guestbook.asp, formgb.asp, and msggb.asp...

IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2017-32855)

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. An information disclosure vulnerability exists in IBM BigFix Platform versions 9.2 and 9.5, which can be exploited by remote attackers to access URLs via server logs, referrer headers, or browser history...

Unspecified Vulnerability in Oracle Learner Pages Subcomponent

Oracle iLearning is an enterprise-class learning management system LMS from Oracle Corporation. The system provides functionality for managing, delivering, and tracking online training in a classroom-based environment. learner Pages subcomponent is one of the learner pages subsystem. An unspecifi...