GHSA-2P78-8HH6-96XC feedparser Cross-site Scripting vulnerability

Cross-site scripting XSS vulnerability in feedparser.py in Universal Feed Parser aka feedparser or python-feedparser 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTML via malformed XML comments...

idreamsoft iCMS Server-Side Request Forgery Vulnerability

idreamsoft iCMS is an open source content management system CMS based on PHP and MySQL. A server-side request forgery vulnerability exists in idreamsoft iCMS version 7.0.9. An attacker can exploit the vulnerability to read sensitive files and access the intranet...

MetInfo Cross-Site Scripting Vulnerability (CNVD-2018-14100)

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site scripting vulnerability exists in MetInfo version 6.0.0. A remote attacker can inject arbitrary script or HTML by modifying the name of the navigation bar on the homepag...

CVE-2018-3046

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Difficult to exploit vulnerability allows low privileged attacker with network...

CVE-2018-3043

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

Unspecified Vulnerability in Oracle Java SE (CNVD-2018-13570)

Java SE is the Java Platform Standard Edition, for the development and deployment of desktop, server and embedded devices and real-time environment of Java applications. An unspecified vulnerability exists in the Deployment component of Oracle Java SE 8u172, 10.0.1. An attacker could exploit this...

CVE-2018-1255

RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to a...

PT-2018-12308 · Aurorasparc Llc · Mp4V2

Name of the Vulnerable Software and Affected Versions: MP4v2 version 2.0.0 Description: A double free issue exists in the MP4StringProperty class, located in mp4property.cpp. This occurs when a dangling pointer is freed again in the destructor after an exception is triggered. Recommendations: For...

IBM iNotes Cross-Site Scripting Vulnerability (CNVD-2018-13098)

IBM iNotes also known as IBM Lotus iNotes is a set of Web-based e-mail software from IBM in the United States. The software helps different types of users online and offline users to effectively manage business-critical information and collaboration. A cross-site scripting vulnerability exists in...

TOPdesk Cross-Site Request Forgery Vulnerability

TOPdesk is a terminal management system from the Dutch company TOPdesk. The system enables the management and maintenance of desktop systems through behavioral monitoring, system monitoring and security status detection. A cross-site request forgery vulnerability exists in TOPdesk versions prior ...

IBM Rational Quality Manager Information Disclosure Vulnerability

IBM Rational Quality Manager RQM is a collaborative, Web-based quality management solution from IBM. The program provides test planning and test evaluation management methods within the entire software development lifecycle, and the ability to share information, automation to accelerate the proje...

IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2018-12873)

IBM Rational Quality Manager RQM is a collaborative, Web-based quality management solution from IBM. The program provides test planning and test evaluation management methods within the entire software development lifecycle, and the ability to share information, automation to accelerate the proje...

CVE-2018-11543

A Local File Inclusion LFI vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the downloading of arbitrary files via an unspecified vector. It affects the 1000 and 2000 devices 6.0.x up to Build 446, 6.1.x up to Build 492, and 7.0.x up to Build 485. It affects...

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-13454)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in the product/card.php...

IBM DOORS Next Generation Cross-Site Scripting Vulnerability (CNVD-2018-12868)

IBM DOORS Next Generation DNG/RRC is a suite of software for capturing, tracking, analyzing, and managing requirements from IBM in the United States. The software provides a single platform for global team collaboration to manage requirements more efficiently and share unified user, server and...

UBUNTU-CVE-2018-13449

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statutbuy parameter...

ImageMagick Denial of Service Vulnerability (CNVD-2018-12761)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadDCMImage' function of the coders/dcm.c file in the ImageMagick...

IBM RQM/RCLM Cross-Site Scripting Vulnerability

IBM Rational Quality Manager is a Web-based collaborative quality management solution.IBM Rational Collaborative Lifecycle Management is an application lifecycle management solution. A cross-site scripting vulnerability exists in the implementation of IBM Rational Quality Manager and IBM Rational...

Google Android System Information Disclosure Vulnerability (CNVD-2018-16197)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Google Android versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. An attacker can exploit this...

Unspecified Vulnerability in Beckhoff TwinCAT

Beckhoff TwinCAT is a software system consisting of a real-time environment and a real-time system for executing control programs in a development environment for programming, diagnostics and system configuration. A security vulnerability exists in Beckhoff TwinCAT version 3.0, which originates...