13954 matches found
Code injection
Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-863 and CyVDB-867...
Information disclosure
HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...
Sql injection
SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887...
CVE-2015-6331
SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.51 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCus39887...
CVE-2015-6329
SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCut64074...
CVE-2015-4547
EMC RSA Web Threat Detection before 5.1 SP1 stores a cleartext AnnoDB password in a configuration file, which allows remote authenticated users to obtain sensitive information by reading this file...
CVE-2015-5659
SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
Cross site request forgery (csrf)
IBM License Metric Tool 9 before 9.2.1.0 and Endpoint Manager for Software Use Analysis 9 before 9.2.1.0 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information via a REST API request...
Sql injection
SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-5659
SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x before 2.0.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-5659
The CVE-2015-5659 entry corresponds to a SQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS, affecting 2.x releases prior to 2.0.1. According to connected documents, the vulnerability allows a remote attacker with authentication to execute arbitrary SQL comma...
Open-Xchange (OX) App Suite Access Control Vulnerability
Open-Xchange OX App Suite is prone to an information disclosure vulnerability. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program ...
CVE-2015-6549
Cross-site scripting XSS vulnerability in an application console in the server in Symantec NetBackup OpsCenter before 7.7.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-5642
Multiple SQL injection vulnerabilities in ICZ MATCHA INVOICE before 2.5.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2015-4964
IBM UrbanCode Deploy 6.0 and 6.0.1.x before 6.0.1.10, 6.1.1.x before 6.1.1.8, and 6.1.2 writes admin AUTHTOKEN values to execution logs, which allows remote authenticated users to gain privileges by leveraging the ability to create and execute a process...
Cross site scripting
Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX003, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7.5.x before 7.5.0.8 IFIX003 and 7.6.0 before 7.6.0.1 IFIX001 for SmartCloud Control Desk; and Maximo Asset Managemen...
Code injection
IBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before iFix4, 10.0.2.6 before iFix8, 10.0.2.7 before iFix1, and 10.0.4.x before iFix2 allows remote authenticated users to obtain sensitive supplier-bid information via unspecified vectors...
CVE-2015-5022
IBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0.0.2 and 1.0.0.3 before 1.0.0.32, when access by guests is enabled, place an internal hostname and a payload path in a response, which allows remote authenticated users to obtain sensitive information ...