Apache Derby External Control Input Vulnerability

Apache Derby is the United States Apache Apache Software Foundation developed a set of open source database management system. A security vulnerability exists in Apache Derby versions 10.3.1.4 through 10.14.1.0, which is caused by the program failing to properly validate incoming network packets....

SQL Injection Vulnerability in Nagios XI 5.4.12 and Prior Versions

Nagios is an open source, free network monitoring tool that effectively monitors the status of hosts, switches routers and other network devices, printers, etc. for Windows, Linux and Unix. Nagios XI 5.4.12 and earlier versions suffer from a SQL injection vulnerability that can be exploited by...

The vulnerability in the pre_connect_check.php web interface of the Seagate BlackArmor NAS software storage system allows a attacker to gain access to the device with root privileges.

The vulnerability of the backupmgt/preconnectcheck.php component of Seagate BlackArmor NAS network storage software is related to the use of a pre-installed account. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full access to the device with root privileges...

EasyCMS Cross-Site Scripting Vulnerability (CNVD-2018-08985)

EasyCMS is a lightweight scalable open source content management system CMS written in PHP. A cross-site scripting vulnerability exists in EasyCMS version 1.3. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the title, keyword, abstract and content...

Flexense DiskSorter Enterprise Cross-Site Scripting Vulnerability

Flexense DiskSorter Enterprise is a file classification solution from Flexense Canada. The solution supports classification of files on local disks, network shares, NAS storage devices and enterprise storage systems. A cross-site scripting vulnerability exists in Flexense DiskSorter Enterprise...

Oracle Adaptive Access Manager Component Remote Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other capabilities.Adaptive Access Manager is one of the authentication components. A security...

The vulnerability of the HPE Network Node Manager i (NNMi) software, a computer network management tool, stems from security flaws. This allows attackers to execute cross-site scripting (XSS) attacks, open redirect attacks, and bypass security restrictions.

The vulnerability of the HPE Network Node Manager i NNMi software solution is related to security flaws in its mechanisms. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting XSS attacks, open redirection attacks, and bypass system security restrictions...

WordPress PixelYourSite Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress PixelYourSite plugin versions prior to 5.3.0, which can be...

Oracle Communications Order and Service Management Component Remote Vulnerability (CNVD-2018-09096)

Oracle Communications is Oracle's suite of applications for rapidly delivering and monetizing digital life communications.Communications Order and Service Management is one of the components used to coordinate activities between internal BOSS systems. A security vulnerability exists in the WebUI...

WordPress WP Google Map Plugin plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress WP Google Map Plugin plugin versions prior to 4.0.4, which can b...

Oracle Banking Corporate Lending Component Remote Vulnerability (CNVD-2018-09101)

Oracle Financial Services Applications is the United States Oracle Oracle company's set of core banking, online banking and property management in one of the financial services software. Banking Corporate Lending is one of the bank loan management components. A security vulnerability exists in th...

Composr CMS Cross-Site Scripting Vulnerability

Composr CMS is an open source content management system CMS developed using HTML, CSS and WCAG technologies. A cross-site scripting vulnerability exists in Composr CMS version 10.0.13. A remote attacker can exploit this vulnerability by sending a page=admin-setupwizard&type=step3 request to...

Apple SafarS and iOS Safari Login AutoFill Information Disclosure Vulnerability

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems.Safari Login AutoFill is one of the auto-fill field component. A security...

Kliqqi CMS SQL Injection Vulnerability

Kliqqi CMS is a content management system CMS. A SQL injection vulnerability exists in Kliqqi CMS version 3.5.2. A remote attacker can exploit the vulnerability to view data in the database with the help of the 'randkey' parameter with the value AND SELECT FROM SELECTSLEEP5MBMY to potentially gai...

Discuz! DiscuzX cross-site scripting vulnerability (CNVD-2018-08776)

Discuz! DiscuzX is an online forum system. A cross-site scripting vulnerability exists in Discuz! DiscuzX X3.4 and previous versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of forum.php?mod=post&action=newthread...

HongCMS Cross-Site Request Forgery Vulnerability

HongCMS is an open source lightweight content management system CMS. A cross-site request forgery vulnerability exists in HongCMS version 3.0.0. A remote attacker can exploit this vulnerability to add an administrator account with the help of admin/index.php/users/save URI...

Oracle Access Manager Remote Vulnerability (CNVD-2018-09095)

Oracle Access Manager is the latest solution for centralized identity management and access control. A remote security vulnerability exists in the Oracle Access Manager component that can be exploited by an unauthenticated, remote attacker to compromise integrity, confidentiality, and availabilit...

Oracle WebCenter Sites Remote Vulnerability (April 2018 CPU)

The version of Oracle WebCenter Sites running on the remote host is affected by an unspecified flaw in the Sites component formerly FatWire Content Server that allows an remote attacker to impact confidentiality and integrity. Note that this issue only applies to versions 11.1.1.8.0, 12.2.1.2.0,a...

CVE-2018-1146

A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cgi. When enabled the telnet session requires no password and provides root access...

Oracle Java SE Security Updates (apr2018-3678067) 03 - Linux

Oracle Java SE is prone to a remote unspecified security vulnerability. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...