Red Hat Gluster Unauthorized Operation Vulnerability

Red Hat Gluster is an open source distributed file system from Red Hat Red Hat. The system is mainly for media streaming, data analysis and other data- and bandwidth-intensive tasks to create large-scale distributed storage solutions. A security vulnerability exists in Red Hat Gluster 4.1.4 and...

DedeCMS Cross-Site Scripting Vulnerability (CNVD-2019-01727)

DedeCMS is a PHP-based web content management system CMS. A cross-site scripting vulnerability exists in the /member/myfriend.php file in DedeCMS version 5.7 SP2, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the 'fype' parameter...

Waimai Super Cms Cross-Site Scripting Vulnerability (CNVD-2018-21792)

waimai Super Cms is a takeaway ordering system. The system is compatible with IE, Firefox, Chrome, Safari and Opera browsers. A cross-site scripting vulnerability exists in version 20150505 of Waimai Super Cms. A remote attacker can exploit this vulnerability by sending the 'username' parameter t...

Hiroshi Yuki YukiWiki Cross-Site Scripting Vulnerability

Hiroshi Yuki YukiWiki is a Wiki engine. A cross-site scripting vulnerability exists in Hiroshi Yuki YukiWiki 2.1.3 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary script in a user's web browser...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2019-06895)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

GHSA-3357-829X-M9PR Apache CXF Fediz application plugins are vulnerable to Denial of Service (DoS) attacks

Application plugins in Apache CXF Fediz prior to version 1.1.3 and 1.2.x prior to 1.2.1 allow remote attackers to create a denial of service...

LAquis SCADA Buffer Overflow Vulnerability

LAquis SCADA is a suite of SCADA software for monitoring and data acquisition. A stack buffer overflow vulnerability exists in LAquis SCADA 4.1.0.3870 and earlier versions that can be exploited by a remote attacker to execute code...

Camaleon CMS Cross-Site Scripting Vulnerability

Camaleon CMS is an advanced dynamic content management system CMS based on Ruby on Rails. A cross-site scripting vulnerability exists in Camaleon CMS version 2.4. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

JTBC (PHP) File Deletion Vulnerability

JTBC PHP is an open source CMS Content Management System. JTBC PHP 3.0.1.6 version of the file deletion vulnerability , a remote attacker can use /console/file/manage.php?type=action&action=delete&path=c%3A%2F URL to exploit the vulnerability to delete arbitrary files on the system...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2018-21252)

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in the...

SAP NetWeaver Application Server for ABAP Cross-Site Scripting Vulnerability

SAP NetWeaver is a service-oriented, integrated application platform from SAP that provides a development and runtime environment for SAP applications. SAP NetWeaver Application Server AS for ABAP is an application server that runs in NetWeaver and is based on the ABAP Advanced Business Programmi...

Adobe Acrobat and Reader Arbitrary Code Execution Vulnerability (CNVD-2018-26552)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader in the existence of arbitrary code execution vulnerabilities. A...

Microsoft Azure IoT Device Client SDK Remote Memory Corruption Vulnerability

Microsoft C SDK for Azure IoT is a C-based software development kit for developing Azure IoT Internet of Things platform applications from Microsoft. A remote memory corruption vulnerability exists in the Microsoft Azure IoT Device Client SDK. An attacker can exploit this vulnerability to execute...

Microsoft SharePoint Enterprise Server Remote Elevation of Privilege Vulnerability (CNVD-2019-00964)

Microsoft SharePoint Enterprise Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A...

CVE-2018-15389

A vulnerability in the install function of Cisco Prime Collaboration Provisioning PCP could allow an unauthenticated, remote attacker to access the administrative web interface using a default hard-coded username and password that are used during install. The vulnerability is due to a hard-coded...

HPE Integrated Lights-Out 3, 4 and 5 Information Disclosure Vulnerabilities

HPE Integrated Lights-Out iLO 3, 4, and 5 are all embedded server management technologies from Hewlett Packard Enterprise HPE that monitor and maintain server operations, remotely control servers, and more through an integrated remote management port. An information disclosure vulnerability exist...

HPE Integrated Lights-Out 5 Arbitrary Code Execution Vulnerability

HPE Integrated Lights-Out iLO 3, 4, and 5 are all embedded server management technologies from Hewlett Packard Enterprise HPE that monitor and maintain server operations, remotely control servers, and more through an integrated remote management port. A security vulnerability exists in HPE iLO 3,...

Denial of service

A potential remote denial of service security vulnerability has been identified in HPE Integrated Lights Out 4 prior to v2.60 and iLO 5 for Gen 10 servers prior to v1.30...

IBM Business Process Manager SQL Injection Vulnerability

IBM Business Process Manager BPM is a comprehensive set of business process management platform from IBM in the United States. The platform provides a range of tools related to process modeling, assembly, monitoring and deployment for business. A SQL injection vulnerability exists in IBM BPM...

PHP Apache2 Component Cross-Site Scripting Vulnerability

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language is primarily used for web development and supports a variety of databases and operating systems.Apache2 is one of the HTTP server components. A cross-site...