Adobe Shockwave Player Remote Memory Corruption Vulnerability (CNVD-2018-05011)

Adobe Shockwave Player is software that plays web content created using Macromedia and Adobe Director. A memory corruption vulnerability exists in versions prior to Adobe Shockwave Player 11.6.4.634, which could allow a remote attacker to execute arbitrary code or cause a denial of service...

Z-BlogPHP Cross-Site Scripting Vulnerability

Z-BlogPHP is an open source PHP-based blogging system developed by the Z-Blog community. A cross-site scripting vulnerability exists in Z-BlogPHP version 1.5.1.1740. A remote attacker can exploit this vulnerability to inject arbitrary Web script or HTML...

Afian FileRun SQL Injection Vulnerability (CNVD-2018-06552)

Afian FileRun is an extensible file manager from Afian AB, Sweden, that features file sharing, cloud file storage, and more. A SQL injection vulnerability exists in Afian FileRun versions prior to 2018.02.13. A remote attacker can exploit the vulnerability to execute SQL commands with the help of...

NTP.org 'ntpd' Authenticated Symmetric Passive Peering Remote Vulnerability

NTP.org SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ntp:ntp"; ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.812793";...

Sql injection

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

CVE-2018-7734

Afian FileRun before 2018.02.13 suffers from a remote SQL injection vulnerability, when logged in as superuser, via the search parameter in a /?module=users&section=cpanel&page=list request...

Webzyme Couch Path Disclosure Vulnerability

Webzyme Couch is the United States Webzyme Softwares, Inc. of a set of open source content management system CMS. A security vulnerability exists in Webzyme Couch. A remote attacker can exploit the vulnerability by sending a direct request to the includes/mysql2i/mysql2i.func.php or...

IBM Security Guardium Big Data Intelligence Information Disclosure Vulnerability (CNVD-2018-06604)

IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. A security vulnerability exists in IBM Security Guardium Big Da...

Fuji Electric FS010W Cross-Site Scripting Vulnerability

The Fuji Electric FS010W is a wireless router product from Fuji Electric Japan. A cross-site scripting vulnerability exists in the Fuji Electric FS010W using firmware version FS010W00V1.3.0 and earlier. A remote attacker can exploit this vulnerability to inject arbitrary web scripts...

Micro Focus Universal CMDB Arbitrary Code Execution Vulnerability

Micro Focus Universal CMDB is a resource management solution from Micro Focus in the United Kingdom. The solution provides bottom-up capabilities including IT infrastructure auto-discovery, data modeling, service mapping definition and service impact analysis, etc. Configuration Manager is one of...

Splunk Enterprise and Light Remote Security Bypass Vulnerability

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze machine-generated data, including data generated by all IT systems and infrastructures physical, virtual, and cloud.Splunk Enterprise is...

Red Hat Wildfly Directory Traversal Vulnerability (CNVD-2018-06332)

Red Hat Wildfly formerly known as JBoss Application Server is a U.S. Red Hat Red Hat company based on JavaEE open source application server. A directory traversal vulnerability exists in Red Hat Wildfly, which stems from the program's failure to adequately filter user-submitted input. A remote...

CVE-2018-6487

Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information...

CVE-2017-18095

The SnippetRPCServiceImpl class in Atlassian Crucible before version 4.5.1 the fixed version 4.5.x and before 4.6.0 allows remote attackers to comment on snippets they do not have authorization to access via an improper authorization vulnerability...

CVE-2017-8978

A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found...

CVE-2017-5783

A remote clickjacking vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2016-8533

A remote priviledge escalation vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2016-8535

A remote HTTP parameter Pollution vulnerability in HPE Matrix Operating Environment version 7.6 was found...

Denial of service

A remote denial of service vulnerability in HPE Version Control Repository Manager VCRM in all versions prior to 7.6 was found...

Information disclosure

A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found...