PT-2017-1959 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.54 and earlier MySQL Server versions 5.6.35 and earlier MySQL Server versions 5.7.17 and earlier Description: The issue is related to inadequate access control in the MySQL Server component of Oracle MySQL,...

Denial of service

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged user on a guest operating system, aka "Hyper-V...

LAquis SCADA Software Web Server Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of LAquis SCADA Software. Authentication is not required to exploit this vulnerability. The specific flaw exists within global processing of requests inside the web server. The issue results...

Nextcloud OCS API Elevation of Privilege Vulnerability

Nextcloud is an open source self-hosted file synchronization and sharing communication application platform from Nextcloud Germany.Nextcloud Server is one of the server version. An elevation of privilege vulnerability exists in Nextcloud Server versions prior to 9.0.55 and prior to 10.0.2. An...

CVE-2017-7392

In TigerVNC 1.7.1 SSecurityVeNCrypt.cxx SSecurityVeNCrypt::SSecurityVeNCrypt, an unauthenticated client can cause a small memory leak in the server...

NoSQL Injection

A NoSQL injection occurs when a value originating from the client's request is used within a NoSQL call without prior sanitisation. This can allow cyber-criminals to execute arbitrary NoSQL code and thus steal data, or use the additional functionality of the database server to take control of...

Enterprise security vulnerability notification engine-vulnerability warning-the black bar safety net

Today most enterprises are in vulnerability scanning+vulnerability announcements, there are the following two questions: 1. The drain sweep the presence of the“scan cycle is long, the scan database not updating”, etc., while the scanning report whether the number of interference terms, leading to...

Nextcloud Server and ownCloud Server Security Bypass Vulnerability

ownCloud is a free and open source personal cloud storage solution from German company ownCloud. nextcloud is an open source self-hosted file synchronization and sharing communication application platform. ownCloud Server and Nextcloud Server are both a server version of one of them. A security...

CVE-2017-6864

The integrated web server in Siemens RUGGEDCOM ROX I all versions at port 10000/TCP could allow an authenticated user to perform stored Cross-Site Scripting attacks...

PT-2017-17643 · Rancher · Rancher Server

Name of the Vulnerable Software and Affected Versions: Rancher Labs rancher server versions 1.2.0 through 1.2.3 Rancher Labs rancher server versions 1.3.0 through 1.3.4 Rancher Labs rancher server versions 1.4.0 through 1.4.2 Rancher Labs rancher server versions 1.5.0 through 1.5.2 Description: T...

CVE-2017-7297

Rancher Labs rancher server 1.2.0+ is vulnerable to authenticated users disabling access control via an API call. This is fixed in versions rancher/server:v1.2.4, rancher/server:v1.3.5, rancher/server:v1.4.3, and rancher/server:v1.5.3...

CVE-2016-9468

Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the dav app. The exception message displayed on the DAV endpoints contained partially user-controllable input leading to a potential misrepresentation of information...

CVE-2016-9465

CVE-2016-9465 affects Nextcloud Server < 10.0.1 and ownCloud Server

CVE-2016-8973

IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an authenticated user to upload infected malicious files to the server. IBM Reference : 1999960...

The use of server vulnerability mining black production case study-vulnerability warning-the black bar safety net

BAT represents the use of the Internet to make a fortune the Bright Side, the dark side of the Black output is also exhausted their imagination to maximize your own gain, and in this regard the Black output can be described as the eight Immortals crossing the sea, each show its can. Have to steal...

CVE-2017-5178

An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system account that is installed by default. The default system account is difficult to configure with non-default credentials...

CVE-2017-6187

Disk Savvy Enterprise 9.4.18 exposes a buffer overflow in its built-in web server that can be triggered by a long URI in a GET request, potentially allowing remote code execution. This is documented across multiple sources (NVD description, SAINT background entries, and exploit references such as...

CVE-2016-4312

XML external entity XXE vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 before WSO2-CARBON-PATCH-4.4.0-0231 allows remote authenticated users with access to XACML features to read arbitrary files, cause a denial of service, conduct server-side request forgery SSRF attacks, o...

Cisco Meeting Server Denial of Service Vulnerability

Cisco Meeting Server formerly known as Acano Conferencing Server is the United States Cisco Cisco company's set of audio and video conferencing server software. A remote denial of service vulnerability exists in Cisco Meeting Server. An attacker could exploit this vulnerability to cause the...

CVE-2017-5997

The SAP Message Server HTTP daemon in SAP KERNEL 7.21-7.49 allows remote attackers to cause a denial of service memory consumption and process crash via multiple msgserver/group?group= requests with a crafted size of the group parameter, aka SAP Security Note 2358972...