Information disclosure

A remote information disclosure vulnerability in HPE Matrix Operating Environment version v7.6 was found...

Command injection

A Remote Arbitrary Command Execution vulnerability in HPE StoreVirtual 4000 Storage and StoreVirtual VSA Software running LeftHand OS version v12.5 and earlier was found. The problem was resolved in LeftHand OS v12.6 or any subsequent version...

Denial of service

A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found...

Design/Logic Flaw

A remote HTTP parameter Pollution vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2016-8521

A Remote click jacking vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found...

Improper access control

A remote unauthenticated access vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

Denial of service

A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...

Information disclosure

A remote information disclosure vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2016-8535

A remote HTTP parameter Pollution vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2016-8531

A remote information disclosure vulnerability in HPE Matrix Operating Environment version 7.6 was found...

Multiple Adobe products image conversion module out-of-bounds memory write vulnerability (CNVD-2018-05045)

Acrobat DC Continuous Track and so on are the United States of America Auduby Adobe products. Acrobat DC Continuous Track is a desktop version of the PDF solution of the continuous update version. Reader DC Continuous Track is a PDF reading tool of the continuous update version. image conversion...

Progress Sitefinity Cross-Site Scripting Vulnerability

Progress Sitefinity is an open source platform for building corporate websites and intranets. A cross-site scripting vulnerability exists in Progress Sitefinity version 9.1. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via Content Management Templa...

CVE-2018-5792

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Heap Overflow in the HSD Process over the MINT Media Independent Tunnel Protocol on the WiNG Access Point via crafted packets...

CVE-2017-18082

The plan configure branches resource in Atlassian Bamboo before version 6.2.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability through the name of a branch...

The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software, related to errors in managing registration data, allows a hacker to obtain user login credentials.

The vulnerability of the Zivif PR115-204-P-RS webcam’s microprogramming software is related to errors in managing registration data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain user credentials using an HTTP request...

Debian unstable and Debian squeeze Xpdf arbitrary file deletion vulnerability

Debian unstable and Debian squeeze are both free operating systems created by the Debian Project Collaboration with Linux or FreeBSD as the kernel. foo2zjs is one of the printer drivers. xpdf is an open-source PDF reader integrated into it. zxpdf is one of the command script. A security...

The vulnerability of the microprogrammed surveillance camera software ACTi models series B, D, E, and I lies in the rigid encoding of registration data, which allows a intruder to gain access to the device with administrator rights.

The vulnerability of the ACTi series D, B, E, and I video surveillance camera microprogramming systems is related to the use of a pre-installed administrator account. Exploiting this vulnerability can allow an attacker operating remotely to gain access to the device with administrator privileges...

TSiteBuilder SQL Injection Vulnerability

TSiteBuilder is a set of tools for building websites, mainly for creating HTML-based websites. A SQL injection vulnerability exists in TSiteBuilder version 1.0. A remote attacker can exploit the vulnerability by sending the 'id' parameter to the /site.php, /pagelist.php, or /pagenew.php files to...

Google Chrome for Mac, Windows and Linux Security Bypass Vulnerability

Google Chrome for Mac, Windows and Linux is a web browser developed by Google, Inc. for the Mac, Windows and Linux platforms. A security vulnerability exists in versions of Google Chrome prior to 64.0.3282.119 for Windows, Mac and Linux platforms, which stems from the program's failure to...

Google Chrome for Mac, Windows and Linux Competitive Conditions Vulnerability

Google Chrome for Mac, Windows and Linux is a web browser developed by Google, Inc. for the Mac, Windows and Linux platforms. A competitive conditions vulnerability exists in versions of Google Chrome prior to 64.0.3282.119 for Windows, Mac and Linux based platforms. A remote attacker could explo...