Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18124)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Java SE 8u131 has a security vulnerability in its implementation that allows an attacker to exploit...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18172)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE/JRockit has a security vulnerability in its implementation that allows an attacker t...

Oracle Java SE Remote Vulnerability (CNVD-2017-18125)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Java SE 8u131 has security vulnerabilities in its implementation that allow an attacker to exploit...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18173)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE/JRockit has security vulnerabilities in its implementation that allow an attacker to...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18171)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE/JRockit has a security vulnerability in its implementation that allows an attacker t...

Oracle Java SE Remote Vulnerability (CNVD-2017-18127)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE has security vulnerabilities that could be exploited by attackers to compromise...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18126)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE/JRockit has a security vulnerability that could be exploited by an attacker to...

Oracle Java SE/JRockit Remote Vulnerability (CNVD-2017-18230)

Java SE is short for Java Platform Standard Edition, based on the JDK and JRE, for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE/JRockit has a security vulnerability that could be exploited by an attacker to...

Oracle WebLogic Server Remote Vulnerability (CNVD-2017-24344)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platform for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. Oracle WebLogic Server is one of the application server components for cloud and traditional...

GLPI Cross-Site Request Forgery Vulnerability (CNVD-2017-25436)

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A cross-site request forgery vulnerability exists in GLPI version 0.90.4...

CVE-2016-7507

Cross-Site Request Forgery CSRF vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application...

CMS Made Simple Upload Vulnerability

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMSMS version...

CVE-2017-11340

There is a Segmentation fault in the XmpParser::terminate function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack...

Microsoft EDGE Remote Memory Corrupted Code Execution Vulnerability (CNVD-2017-22681)

Microsoft Edge is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Edge, which allows attackers to exploit the vulnerability by submitting a special WEB page and tricking the user into parsing it, which can crash the application or execute arbitrary code...

Microsoft EDGE Remote Memory Corruption Code Execution Vulnerability (CNVD-2017-22682)

Microsoft Edge is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Edge, which allows attackers to exploit the vulnerability by submitting a special WEB page and tricking the user into parsing it, which can crash the application or execute arbitrary code...

Microsoft Office CVE-2017-8501 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

EMC ESRS Policy Manager Default Password Vulnerability

EMC ESRS Policy Manager is a suite of remote service policy management software from EMC Corporation that provides a two-way remote connection between EMC customer service and end-user EMC products and solutions. A security vulnerability exists in versions of EMC ESRS Policy Manager prior to 6.8....

Cisco Ultra Services Framework Unauthorized Access Vulnerability

Cisco Ultra Services Framework is an intelligent online service delivery platform from Cisco.Ultra Automation Service is one of the automation services. A security vulnerability exists in Cisco Ultra Services Framework for UAS versions prior to 5.0.3 and prior to 5.1. A remote attacker could...

The vulnerability of the as_sindex__simatch_list_by_set_binid request function in the Aerospike Database management system allows a hacker to execute arbitrary code.

The vulnerability of the assindexsimatchlistbysetbinid request function in the Aerospike Database management system is caused by buffer overflow in the stack. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code by sending a specially crafted packet. To...

Database Anonymization Arbitrary Code Execution Vulnerability in Multiple Odoo Products

Odoo formerly OpenERP and others are products of the Belgian company Odoo, an Enterprise Resource Planning ERP and Customer Relationship Management CRM system; Odoo Community Edition is its Community Edition; Odoo Enterprise Edition is its Enterprise Edition.Database Database Anonymization module...