Logitech Media Server Cross-Site Scripting Vulnerability (CNVD-2017-36361)

Logitech Media Server is an audio playback software from Logitech USA. A cross-site scripting vulnerability exists in Logitech Media Server version 7.9.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the 'favorite' tag...

Logitech Media Server Cross-Site Scripting Vulnerability (CNVD-2017-36360)

Logitech Media Server is an audio playback software from Logitech USA. A cross-site scripting vulnerability exists in Logitech Media Server version 7.9.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

HP Content Manager Workgroup Service Denial of Service Vulnerability

HP Content Manager is a governance-based enterprise content management system for helping government agencies, regulated industries, and global organizations manage their business content from creation to disposal. A remote denial of service vulnerability exists in HPE Content Manager Workgroup...

VIM SQL Injection Vulnerability

VIM is an open source, configurable text editor for creating and changing any type of text, which can be used on most UNIX systems and Apple OS X. It can be used on most UNIX systems. A SQL injection vulnerability exists in VIM. A remote attacker can exploit this vulnerability by sending the...

CVE-2017-14359

A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to allow cross-site scripting...

Sokial Social Network Script SQL Injection Vulnerability

Sokial Social Network Script is a set of social networking site scripts. The script is used to create social network sites with content management, multi-language support and more. A SQL injection vulnerability exists in Sokial Social Network Script version 1.0. The vulnerability can be exploited...

SoftDatepro Dating Social Network SQL Injection Vulnerability

SoftDatepro Dating Social Network is a social networking platform. The platform features live chat, automated matching and private dating. A SQL injection vulnerability exists in SoftDatepro Dating Social Network version 1.3. A remote attacker can exploit this vulnerability to inject SQL commands...

Circle with Disney Remote Access Vulnerability

Circle with Disney is a set of network monitoring and management devices for monitoring children's online behavior from Circle Media, Inc. in the United States. A remote access vulnerability exists in the remote control feature of Circle with Disney version 2.0.1. A remote attacker can exploit th...

Basic B2B Script SQL Injection Vulnerability

Basic B2B Script is a B2B e-commerce website system. A SQL injection vulnerability exists in Basic B2B Script. The vulnerability can be exploited by remote attackers to inject SQL commands by sending 'pid' or 'id' parameters to the productview1.php file...

Google Chrome memory misreference vulnerability (CNVD-2017-33600)

Google Chrome for Windows is a Windows-based Web browser developed by Google.Apps is one of the client applications. A memory misreference vulnerability exists in Apps in Google Chrome for Windows. A remote attacker can exploit this vulnerability to read memory across boundaries with the help of...

CVE-2017-15935

Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function. This is only exploitable by administrators who upload a PHP file...

WordPress Landing Pages Plugin Arbitrary Code Execution Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WordPress Landing Pages is one of the landing page plugin. A security vulnerability exists in versions of the...

PRTG Network Monitor Arbitrary Code Execution Vulnerability

Paessler PRTG Network Monitor is a suite of network monitoring software from the German company Paessler. The software provides usage monitoring, packet sniffing, in-depth analysis and concise reports. A security vulnerability exists in PRTG Network Monitor version 17.3.33.2830. The vulnerability...

CVE-2016-3049

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 114712...

CVE-2017-14332

Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values...

IrfanView Buffer Overflow Vulnerability (CNVD-2017-32311)

IrfanView is an image viewer developed by Irfan Skiljan, a software developer in Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.50 64-bit. The vulnerability can be exploited by a...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-32296)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.43 of XnView Classic for...

Juniper Junos Space HTML Injection Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. An HTML injection vulnerability exists in Juniper Junos Space versions prior to 17.1R1. A...

Progea Movicon SCADA/HMI Arbitrary Code Execution Vulnerability

Movicon is Scada/HMI industrial monitoring software developed by the Italian automation software provider PROGEA. An arbitrary code execution vulnerability exists in Progea Movicon SCADA/HMI that allows remote attackers without privileges to execute arbitrary code in the form of a malicious DLL...

Issuetracker phpBugTracker cross-site scripting vulnerability (CNVD-2017-30877)

Issuetracker phpBugTracker is a web-based defect tracking system. The system provides features such as project management and defect tracking services. A cross-site scripting vulnerability exists in Issuetracker phpBugTracker versions prior to 1.7.2. A remote attacker can exploit this vulnerabili...