Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability

Document Title: =============== Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2034 Release Date: ============= 2017-02-23 Vulnerability Laboratory ID VL-ID:...

UBUNTU-CVE-2016-9956

The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script...

Cisco Secure Access Control System XML External Entity Information Disclosure Vulnerability

Cisco Secure Access Control System ACS, is the core component of the TrustSec solution of the U.S. Cisco Cisco company, is able to provide RADIUS and TACACS + services of the policy management platform, is the realization of the enterprise network access policy and identity management platform. A...

Cisco Intrusion Prevention System Device Manager Information Leakage Vulnerability

Cisco Intrusion Prevention System is an intrusion prevention system. A remote information leakage vulnerability exists in Cisco Intrusion Prevention System Device Manager. An attacker could exploit this vulnerability to obtain sensitive information and launch further attacks...

Red Hat SPICE Remote Denial of Service Vulnerability

Red Hat SPICE is an adaptive telepresence open-source protocol used by Red Hat's Enterprise Virtualized Desktop Edition to connect users to their virtual desktops, providing the exact same end-user experience as a physical desktop. A denial of service vulnerability exists in Red Hat SPICE. A remo...

CVE-2016-8713

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5.9.9. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this...

CVE-2016-8709

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability...

CVE-2016-8709

A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially crafted PDF file can cause a vulnerability resulting in potential memory corruption. An attacker can send the victim a specific PDF file to trigger this vulnerability...

Remote Unspecified Vulnerability in HP Intelligent Management Center

HP Intelligent Management Center iMC is a set of network intelligent management center solutions from Hewlett-Packard HP. A remote unspecified vulnerability exists in HP Intelligent Management Center. The vulnerability allows an attacker to disclose sensitive information or cause a denial of...

NetApp Data ONTAP Information Disclosure Vulnerability (CNVD-2017-01410)

NetApp Data ONTAP is a set of storage operating system from American NetApp. The system supports the enhancement of the user's enterprise application performance and improve the flexibility of the data center and so on. A security vulnerability exists in versions of NetApp Data ONTAP prior to...

CVE-2016-7164

The construct function in puff.cpp in Libtorrent 1.1.0 allows remote torrent trackers to cause a denial of service segmentation fault and crash via a crafted GZIP response...

IBM AppScan Enterprise Edition Arbitrary Code Execution Vulnerability

IBM AppScan Enterprise Edition is a security vulnerability scanning solution. A security vulnerability exists in IBM AppScan Enterprise Edition that allows remote attackers to exploit the vulnerability to build malicious content that can be parsed by users and can execute arbitrary code...

FiberHome Fengine S5800 Switches Denial of Service Vulnerability

FiberHome Fengine S5800 Switches are the new generation of Gigabit routing switches launched by FiberHome to meet the needs of multi-service access and high-density aggregation. With high-density Gigabit ports and 10 Gigabit uplink, this series of routers and switches can meet the diverse...

ALPINE-CVE-2016-6164

Integer overflow in the movbuildindex function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before 3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving sample size...

Oracle Java SE User Elevation of Privilege Vulnerability

Java SE stands for Java Platform Standard Edition and is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments. A user elevation of privilege vulnerability exists in Oracle Java SE, which can be exploited by remote users...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2017-00993)

Oracle MySQL Server is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost, good reliability and so on. A remote security vulnerability exists in Oracle MySQL Server 5.7.16 and earlier versions. An attacker can...

Oracle E-Business Suite Remote Security Vulnerability (CNVD-2017-00646)

Oracle E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation. Oracle Fulfillment Manager is one of the components that provide telecommunications providers, ISPs Internet Service Providers, and similar vendor companies with the ability to mana...

Oracle PeolpeSoft Enterprise HCM ePerformance Remote Vulnerability

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the Human Capital Management HCM components. A remote securit...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2017-00939)

Oracle FLEXCUBE Universal Banking is the United States Oracle Oracle company's set of real-time, online coverage of retail, group, investment banking, a comprehensive solution. The program supports multi-currency, multi-language and multi-entity operations. A remote security vulnerability exists ...

Oracle Application Testing Suite Remote Vulnerability

The Application Testing Suite is a comprehensive, integrated testing solution that ensures the quality, scalability and availability of Web applications and Web services. A remote security vulnerability exists in Oracle Application Testing Suite. An attacker exploiting the vulnerability via the...