3741 matches found
NetIQ Identity Manager System Enumeration Vulnerability
NetIQ Identity Manager is a comprehensive identity and access control solution. A system enumeration vulnerability exists in NetIQ Identity Manager versions prior to 4.7. An attacker could exploit this vulnerability by performing system enumeration using details provided in the driver log file of...
mysql: Server: GIS unspecified vulnerability (CPU Jan 2018)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: GIS. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...
mysql: Server: DDL unspecified vulnerability (CPU Jan 2018)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
Synology Photo Station Input Validation Vulnerability
Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. An input validation vulnerability exists in SYNOPHOTOFlickrMultiUpload in Synology Photo Station versions prior to 6.8.3-3463 and 6.3-2971. A remote attacker can exploit the vulnerability to...
CVE-2017-0932
Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of validation on the input of the Feature functionality. An attacker with access to an operator read-only account and ssh connection to the devices could escalate privileg...
SQLite Denial of Service Vulnerability (CNVD-2018-06132)
SQLite is an open source C-based embedded relational database management system developed by American software developer D. Richard Hipp. The system is characterized by independence, isolation, cross-platform and so on. A security vulnerability exists in versions prior to SQLite 3.22.0. An attack...
Micro Focus NetIQ Identity Manager Applications Information Disclosure Vulnerability
Micro Focus NetIQ Identity Manager Applications is a suite of identity management applications from Micro Focus UK. The program provides the foundation for account provisioning, user self-service, authorization, and Web services, and supports data sharing and synchronization.NetIQ Identity Manage...
OSIsoft PI Data Archive Denial of Service Vulnerability
OSIsoft PI Data Archive is an efficient storage and archiving component that enables high performance data retrieval through client software. A denial of service vulnerability exists in OSIsoft PI Data Archive 2017 and prior versions. An unauthenticated attacker uses unauthenticated custom reques...
PT-2018-5273 · Dolibarr · Dolibarr
Name of the Vulnerable Software and Affected Versions: Dolibarr versions prior to 7.0.0 Description: The issue is a Cross Site Scripting XSS vulnerability in Product details, which can result in the execution of javascript code. Recommendations: For versions prior to 7.0.0, update to version 7.0....
CVE-2017-5129
A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
Atlassian JIRA 'Jira-importers-plugin' Cross-Site Request Forgery Vulnerability
Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace.Jira-importers-plugin is one of the plugins used to provide the core functionality of the Atlassian product. A cross-site request...
UBUNTU-CVE-2018-5091
A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR 52.6 and Firefox 58...
Commvault Command Injection Vulnerability
Commvault is the United States Commvault company's set of Simpana all-in-one software platform based on end-users to provide automatic data protection and instant access to the functions of the software. A command injection vulnerability exists in the ContentStore/Base/CVDataPipe.dll file in...
UBUNTU-CVE-2018-2676
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...
UBUNTU-CVE-2018-2612
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
PT-2018-4304 · Minizip · Minigzip
Name of the Vulnerable Software and Affected Versions: minizip versions prior to 1.1-5 Description: The issue is related to a directory traversal vulnerability in the do extract currentfile function in miniunz.c in miniunzip. This vulnerability might allow remote attackers to write to arbitrary...
Irssi null pointer dereference vulnerability (CNVD-2018-03170)
Irssi is a free, open source IRC client for use in Linux and Unix operating systems. A security vulnerability exists in versions of Irssi prior to 1.0.6. An attacker can exploit this vulnerability to affect the stability of Irssi null pointer backreference...
Zend Framework 'Zend_Db_Select::order()' function SQL Injection Vulnerability
Zend Framework ZF is the United States Zend company developed a set of open source PHP5 development framework , it is mainly used for the development of Web programs and services. A SQL injection vulnerability exists in versions of Zend Framework prior to 1.12.7, which stems from the program's...
Huawei HG8245H Authentication Bypass Vulnerability
The Huawei HG8245H is a modem from Huawei, a Chinese company. An authentication bypass vulnerability exists in versions prior to Huawei HG8245H V300R018C00SPC110 due to the program failing to properly validate privileges. An attacker could exploit the vulnerability to obtain information...