CVE-2018-9948

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10485

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Cisco Firepower Threat Defense software Remote Security Bypass Vulnerability

Cisco Firepower Threat Defense is the United States Cisco Cisco company's set of software running in the firewall. detection engine is one of the detection engine. A security vulnerability exists in the detection engine in Cisco Firepower Threat Defense, which stems from the program's failure to...

ASUS RT-AC68U Cross-Site Scripting Vulnerability (CNVD-2018-09580)

ASUS RT-AC68U is an enterprise-class wireless router product from ASUS. A cross-site scripting vulnerability exists in the ASUS RT-AC68U using firmware versions prior to 3.0.0.4.378.9383. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML...

Adobe Acrobat/Reader Untrustworthy Pointer Dereference Vulnerability

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat/Reader has an untrustworthy pointer dereference vulnerability. The...

Microsoft SharePoint Server Remote Elevation of Privilege Vulnerability (CNVD-2018-11552)

Microsoft Project Server 2010 SP2, Project Server 2013 SP1, and SharePoint Enterprise Server 2016 are products of Microsoft Corporation.Microsoft Project Server 2010 SP2 and Project Server 2013 SP1 are project management solutions for project portfolio management PPM and day-to-day work. SP2 and...

thinkphp SQL Injection Vulnerability (CNVD-2018-09389)

thinkphp is a set of open source, PHP-based lightweight web application development framework. A SQL injection vulnerability exists in thinkphp version 3.1.3. A remote attacker can use the 's' parameter to send a specially crafted SQL statement to the index.php file to exploit the vulnerability t...

SQL Injection Vulnerability in Nagios XI 5.4.12 and Prior Versions

Nagios is an open source, free network monitoring tool that effectively monitors the status of hosts, switches routers and other network devices, printers, etc. for Windows, Linux and Unix. Nagios XI 5.4.12 and earlier versions suffer from a SQL injection vulnerability that can be exploited by...

Apache Derby External Control Input Vulnerability

Apache Derby is the United States Apache Apache Software Foundation developed a set of open source database management system. A security vulnerability exists in Apache Derby versions 10.3.1.4 through 10.14.1.0, which is caused by the program failing to properly validate incoming network packets....

SQL Injection Vulnerability in Nagios XI 5.4.12 and Prior (CNVD-2018-09748)

Nagios is an open source, free network monitoring tool that effectively monitors the status of hosts, switches routers and other network devices, printers, etc. for Windows, Linux and Unix. Nagios XI 5.4.12 and earlier versions suffer from a SQL injection vulnerability that can be exploited by...

EasyCMS Cross-Site Scripting Vulnerability (CNVD-2018-08985)

EasyCMS is a lightweight scalable open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in EasyCMS version 1.3. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the title, keyword, abstract and content...

Seagate BlackArmor NAS Preconnect Check XSS

The vulnerability of the backupmgt/preconnectcheck.php component of Seagate BlackArmor NAS network storage software is related to the use of a pre-installed account. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full access to the device with root privileges...

HPE Network Node Manager i XSS

The vulnerability of the HPE Network Node Manager i NNMi software solution is related to security flaws in its mechanisms. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks, open redirection attacks, and bypass system security restrictions...

Flexense DiskSorter Enterprise Cross-Site Scripting Vulnerability

Flexense DiskSorter Enterprise is a file classification solution from Flexense Canada. The solution supports classification of files on local disks, network shares, NAS storage devices and enterprise storage systems. A cross-site scripting vulnerability exists in Flexense DiskSorter Enterprise...

Oracle Adaptive Access Manager Component Remote Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other capabilities.Adaptive Access Manager is one of the authentication components. A security...

Composr CMS Cross-Site Scripting Vulnerability

Composr CMS is an open source content management system CMS developed using HTML, CSS and WCAG technologies. A cross-site scripting vulnerability exists in Composr CMS version 10.0.13. A remote attacker can exploit this vulnerability by sending a page=admin-setupwizard&type=step3 request to...

WordPress PixelYourSite Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress PixelYourSite plugin versions prior to 5.3.0, which can be...

Oracle Communications Order and Service Management Component Remote Vulnerability (CNVD-2018-09096)

Oracle Communications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications.Communications Order and Service Management is one of the components used to coordinate activities between internal BOSS systems. A security vulnerability exists in the WebUI...

WordPress WP Google Map Plugin plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress WP Google Map Plugin plugin versions prior to 4.0.4, which can b...

Oracle Banking Corporate Lending Component Remote Vulnerability (CNVD-2018-09101)

Oracle Financial Services Applications is the United States Oracle Oracle company's set of core banking, online banking and property management in one of the financial services software. Banking Corporate Lending is one of the bank loan management components. A security vulnerability exists in th...