Oracle Database Server Remote Vulnerability (CNVD-2015-00470)

Oracle Database is a large database of commercial nature. A remote vulnerability exists in Oracle Database Server that allows an attacker to gain 'Create Session, Create Table' privileges using the 'Oracle Net' protocol...

Oracle Transportation Management Remote Vulnerability (CNVD-2015-00481)

Oracle Transportation Manager is a transportation management system developed by Oracle Corporation. A remote vulnerability in Oracle Transportation Management allows attackers to exploit the 'HTTP' protocol to compromise the 'Security' subcomponent...

Oracle Transportation Management Remote Vulnerability (CNVD-2015-00482)

Oracle Transportation Manager is a transportation management system developed by Oracle Corporation. A remote vulnerability in Oracle Transportation Management allows attackers to exploit the 'HTTP' protocol to compromise the 'UI Infrastructure' subcomponent...

Oracle Transportation Management Remote Vulnerability (CNVD-2015-00480)

Oracle Transportation Manager is a transportation management system developed by Oracle Corporation. A remote vulnerability in Oracle Transportation Management allows attackers to exploit the 'HTTP' protocol to compromise the 'Security' subcomponent...

Dell iDRAC Weak SessionID Vulnerability (IPMI Protocol) - Active Check

Intelligent Platform Management Interface IPMI v1.5 SessionID SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

McAfee Advanced Threat Defense Sandbox Remote Security Bypass Vulnerability

McAfee Advanced Threat Defense protects against advanced malware, including zero-day threats, by combining virus signature and threat reputation analysis with sandboxing technology that examines the actual behavior of the malware. A remote security bypass vulnerability exists in the McAfee Advanc...

Cisco Unified Communications Domain Manager Cross-Site Request Forgery Vulnerability

Cisco Unified Communications is the call processing component of a Cisco IP telephony solution. A cross-site request forgery vulnerability exists in Cisco Unified Communications Domain Manager, which allows remote attackers to exploit the vulnerability to hijack the authentication of arbitrary...

Cisco Unified Communications Domain Manager Remote Denial of Service Vulnerability (CNVD-2015-00394)

Cisco Unified Communications is the call processing component of a Cisco IP telephony solution. A remote denial of service vulnerability exists in Cisco Unified Communications Domain Manager, which can be exploited by an attacker to initiate a denial of service and deny service to a legitimate us...

Linux Kernel Remote Security Bypass Vulnerability (CNVD-2015-00402)

Linux is an open source computer operating system kernel. A remote security bypass vulnerability exists in the Linux Kernel, which can be exploited by attackers to bypass security restrictions and perform unauthorized operations...

VDG Security SENSE Information Disclosure Vulnerability (CNVD-2015-00378)

VDG Security SENSE is a video management system VMS from VDG Security in the Netherlands. An information disclosure vulnerability exists in VDG Security SENSE version 2.3.13, which allows remote attackers to exploit the vulnerability to gain access...

MongoDB mongod Malformed X.509 Certificate Handling Remote DoS Vulnerability

MongoDB is prone to remote denial of service DoS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mongodb:mongodb";...

PT-2014-9044 · Imagemagick +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick affected versions not specified Description: The issue allows remote attackers to have an unspecified impact via a corrupted sun file. This is related to the coders/sun.c component in ImageMagick. Recommendations: At the moment,...

Info-ZIP UnZip Remote Heap Buffer Overflow Vulnerability

unzip is a tool for decompressing the .zip file format under Unix. Info-ZIP UnZip suffers from a remote heap buffer overflow vulnerability due to the program's failure to perform sufficient bounds checking on user-supplied input. An attacker can exploit this vulnerability to execute arbitrary cod...

IBM Security AppScan Enterprise Arbitrary Code Execution Vulnerability

IBM Security AppScan Enterprise is a set of U.S. IBM Web application security testing solutions. Formerly known as IBM Rational AppScan Enterprise, the program supports simultaneous scanning of multiple Web applications , generate vulnerability reports and intelligent patching . IBM Security...

MODX Revolution-pl Cross-Site Scripting Vulnerability

MODX Revolution is a content management system that claims to be the most flexible and open and free. A cross-site scripting vulnerability exists in MODX Revolution 2.3.2-pl, which allows remote attackers to inject arbitrary web script or HTML via callback parameters...

Centreon < 2.5.3 Multiple Vulnerabilities

According to its version number, the Centreon application hosted on the remote web server is affected by multiple vulnerabilities : - Multiple unauthenticated SQL injection vulnerabilities. CVE-2014-3828 - A remote, unauthenticated command injection vulnerability in the 'sessionid' and 'templatei...

UBUNTU-CVE-2014-8108

The moddavsvn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service NULL pointer dereference and crash via a request for a URI that triggers a lookup for a virtual transaction name that does not exist...

Morfy CMS v1.05 - Command Execution Vulnerability

Document Title: =============== Morfy CMS v1.05 - Command Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1367 https://github.com/Awilum/monstra-cms/issues/351 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9185 CVE-ID:...

Microsoft Office Invalid Index CVE-2014-6356 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in...

mysql: unspecified vulnerability related to C API SSL CERTIFICATE HANDLING (CPU October 2014)

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING...