SQL Injection Vulnerability in zzcms Latest Product Version /zs/search.php Page

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. zzcms latest product version /zs/search.php page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database data...

CVE-2016-1484

Cisco WebEx Meetings Server 2.6 allows remote attackers to bypass intended access restrictions and obtain sensitive application information via unspecified vectors, aka Bug ID CSCuy92724...

CVE-2016-5390

Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the viewhosts permission containing a filter to obtain sensitive network interface information via a request to API routes beneath "hosts," as demonstrated by a GET request to api/v2/hosts/secrethost/interfaces...

ReadyDesk contains multiple vulnerabilities

Overview ReadyDesk, version 9.1 and possibly others, contains SQL injection, path traversal, hard-coded cryptographic key, and arbitrary file upload vulnerabilities that may be leveraged to expose sensitive data and execute arbitrary code in the context of the vulnerable software. Description...

UBUNTU-CVE-2014-9895

drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 2013 devices, does not properly initialize certain data structures, which allows local users to obtain sensitive information via a crafted application, aka Android internal bug...

CVE-2016-3835

The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, which allows attackers to obtain sensitive information via a crafted application, aka internal bug...

Silicon Graphics LibTIFF Information Disclosure Vulnerability

Silicon Graphics LibTiff is a library for reading and writing TIFF Tagged Image File Format files from the U.S. company Silicon Graphics. The library contains a number of command-line tools to deal with TIFF files. An information disclosure vulnerability exists in the libtiff/tifread.c file in...

Positive Faculty Management System Has a Generic Information Disclosure Vulnerability

The Zhengfang Academic Affairs System is a multi-module integrated information management system for all departments of the college as well as users at all levels, including academic affairs public information maintenance, student management, faculty management, etc. The system is designed to be...

SQL injection vulnerability in the xh parameter of the student/XJB2.asp page of the informatization management system of Guangzhou Zhongda Dongri Education Technology Co.

Guangzhou Zhongda Dongri Education Technology Co., Ltd. education information management system is to provide an integrated campus information solution. A SQL injection vulnerability exists in the informatization management system of Guangzhou Zhongda Dongri Education Technology Co. The lack of...

Xiecheng Intelligent Technology Limited wifi development system suffers from SQL injection vulnerability

Fuzhou Xiecheng Intelligent Technology Co., Ltd. is a commercial WiFi ecosystem-based enterprise integrating commercial WiFi cloud platform development, communication IT hardware integration and customization, and big data products and services. Xiecheng is committed to become the benchmark of wi...

IBM Rational Team Concert Information Disclosure Vulnerability

IBM Rational Team Concert RTC is the U.S. IBM's set of Jazz-based platform and support for decentralized teams for real-time collaboration related to software lifecycle management solutions. An information disclosure vulnerability exists in IBM RTC. An attacker could exploit this vulnerability to...

UBUNTU-CVE-2016-3815

The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28522274...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability in the mail/compose/ComposeActivity.java function of the AOSP Mail component in the Android operating system is related to the lack of protection for sensitive data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential informati...

ECAVA IntegraXor < 5.0.4522 Multiple Vulnerabilities

ECAVA IntegraXor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ecava:integraxor"; if...

Arbitrary File Download Vulnerability in Enterprise Information Management System of Chongqing Gezhi Technology Development Co.

GZEE is a provider of enterprise management and collaborative business solutions. An arbitrary file download vulnerability exists in the enterprise information management system of Chongqing GZEE Technology Development Co. The vulnerability allows an attacker to download arbitrary files and obtai...

SQL Injection Vulnerability in BoZone Travel Distribution System

Wuhan Bozhong E-commerce Co., Ltd. is a new technology-based enterprise specializing in travel agency management software development and sales, website production, and customized development of SME management system. A SQL injection vulnerability exists in the BoZone Travel Distribution System...

SQL Injection Vulnerability in InfoId Parameter of Wave's Government e-Government System

The government e-government system is the social security information system government agencies and institutions information management system civil service management subsystem. Wave's government e-government system InfoId parameter SQL injection vulnerability, attackers can use the vulnerabili...

Zhengzhou Rocky Electronic Technology Co., Ltd. 686 WeChat CPS distribution system id parameter has SQL injection vulnerability

686 WeChat CPS distribution system is a CPS advertising platform system that connects merchants and promoters, promoters, WeChat public platform traffic owners by registering on the platform to promote the goods released by the merchants, the goods sold to get commission. Zhengzhou Rocky Electron...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.

Special Equipment Inspection Management System of Fuzhou Chuangda Electronics Co., Ltd. is a data and information management system. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection and management system: /jy/util/areaadmin.jsp?supform=froms&supaid=area&supcd=DQDM&supnm=area&csh...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.(CNVD-2016-06020)

Fuzhou Tranda Electronics Co., Ltd. is a high-tech enterprise specializing in software development, system integration, security services and other computer information services. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection management system is a data information management...