Dell EMC RecoverPoint and RecoverPoint for Virtual Machines Arbitrary File Read Vulnerability

Dell EMC RecoverPoint and RecoverPoint for Virtual Machines are both products of Dell Dell. The former is a suite of disaster recovery and data protection software, and the latter is a disaster recovery solution for VMware environments. An arbitrary file read vulnerability exists in Dell EMC...

Oracle Java SE and Java SE Embedded Remote Vulnerability

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

GridGain Directory Traversal Vulnerability

GridGain is a suite of in-memory computing platforms from GridGain Systems.Visor GUI Console is one of the visualization consoles. A directory traversal vulnerability exists in the Visor GUI Console in GridGain. A remote attacker can exploit this vulnerability to read arbitrary files via speciall...

Cybozu Mailwise Cross-Site Scripting Vulnerability (CNVD-2018-15282)

Cybozu Mailwise is a Web-based e-mail system from Cybozu, and System settings is one of the system settings components. A cross-site scripting vulnerability exists in System settings in Cybozu Mailwise versions 5.0.0 through 5.4.1. A remote attacker can use this vulnerability to inject arbitrary...

CVE-2018-9948

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10485

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Cisco Firepower Threat Defense software Remote Security Bypass Vulnerability

Cisco Firepower Threat Defense is the United States Cisco Cisco company's set of software running in the firewall. detection engine is one of the detection engine. A security vulnerability exists in the detection engine in Cisco Firepower Threat Defense, which stems from the program's failure to...

Adobe Acrobat/Reader Untrustworthy Pointer Dereference Vulnerability

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat/Reader has an untrustworthy pointer dereference vulnerability. The...

ASUS RT-AC68U Cross-Site Scripting Vulnerability (CNVD-2018-09580)

ASUS RT-AC68U is an enterprise-class wireless router product from ASUS. A cross-site scripting vulnerability exists in the ASUS RT-AC68U using firmware versions prior to 3.0.0.4.378.9383. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML...

Microsoft SharePoint Server Remote Elevation of Privilege Vulnerability (CNVD-2018-11552)

Microsoft Project Server 2010 SP2, Project Server 2013 SP1, and SharePoint Enterprise Server 2016 are products of Microsoft Corporation.Microsoft Project Server 2010 SP2 and Project Server 2013 SP1 are project management solutions for project portfolio management PPM and day-to-day work. SP2 and...

thinkphp SQL Injection Vulnerability (CNVD-2018-09389)

thinkphp is a set of open source, PHP-based lightweight web application development framework. A SQL injection vulnerability exists in thinkphp version 3.1.3. A remote attacker can use the 's' parameter to send a specially crafted SQL statement to the index.php file to exploit the vulnerability t...

SQL Injection Vulnerability in Nagios XI 5.4.12 and Prior (CNVD-2018-09748)

Nagios is an open source, free network monitoring tool that effectively monitors the status of hosts, switches routers and other network devices, printers, etc. for Windows, Linux and Unix. Nagios XI 5.4.12 and earlier versions suffer from a SQL injection vulnerability that can be exploited by...

Apache Derby External Control Input Vulnerability

Apache Derby is the United States Apache Apache Software Foundation developed a set of open source database management system. A security vulnerability exists in Apache Derby versions 10.3.1.4 through 10.14.1.0, which is caused by the program failing to properly validate incoming network packets....

SQL Injection Vulnerability in Nagios XI 5.4.12 and Prior Versions

Nagios is an open source, free network monitoring tool that effectively monitors the status of hosts, switches routers and other network devices, printers, etc. for Windows, Linux and Unix. Nagios XI 5.4.12 and earlier versions suffer from a SQL injection vulnerability that can be exploited by...

The vulnerability in the pre_connect_check.php web interface of the Seagate BlackArmor NAS software storage system allows a attacker to gain access to the device with root privileges.

The vulnerability of the backupmgt/preconnectcheck.php component of Seagate BlackArmor NAS network storage software is related to the use of a pre-installed account. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full access to the device with root privileges...

EasyCMS Cross-Site Scripting Vulnerability (CNVD-2018-08985)

EasyCMS is a lightweight scalable open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in EasyCMS version 1.3. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the title, keyword, abstract and content...

Oracle Adaptive Access Manager Component Remote Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other capabilities.Adaptive Access Manager is one of the authentication components. A security...

The vulnerability of the HPE Network Node Manager i (NNMi) software, a computer network management tool, stems from security flaws. This allows attackers to execute cross-site scripting (XSS) attacks, open redirect attacks, and bypass security restrictions.

The vulnerability of the HPE Network Node Manager i NNMi software solution is related to security flaws in its mechanisms. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks, open redirection attacks, and bypass system security restrictions...

Flexense DiskSorter Enterprise Cross-Site Scripting Vulnerability

Flexense DiskSorter Enterprise is a file classification solution from Flexense Canada. The solution supports classification of files on local disks, network shares, NAS storage devices and enterprise storage systems. A cross-site scripting vulnerability exists in Flexense DiskSorter Enterprise...

Oracle Communications Order and Service Management Component Remote Vulnerability (CNVD-2018-09096)

Oracle Communications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications.Communications Order and Service Management is one of the components used to coordinate activities between internal BOSS systems. A security vulnerability exists in the WebUI...