JVN#08535069: MATCHA SNS vulnerable to code injection

MATCHA SNS provided by ICZ Corporation is an SNS software. MATCHA SNS contains a code injection CWE-94 vulnerability due to a flaw when configuring the database during installation. Impact An unauthenticated attacker who can execute the installer may execute arbitrary PHP code on the server where...

McAfee Threat Intelligence Exchange Secondary Server Information Disclosure Vulnerability

McAfee Threat Intelligence Exchange TIE the United States McAfee McAfee company's set of unified threat defense system to provide security recovery and infection defense capabilities. The system provides comprehensive threat intelligence awareness, instant understanding of the trails of advanced...

JSPMySQL Administrador Cross-Site Scripting Vulnerability

JSPMySQL Administrador is a JSP technology Web server MySQL database remote management tools . JSP/MySQL Administrador Web 1 in the implementation of a cross-site scripting vulnerability , remote attackers through the sys/sys/listaBD2.jsp bd parameter , the use of this vulnerability can be inject...

The vulnerability of the microprogramming software of the Cisco TelePresence Video Communication Server allows attackers to carry out attacks related to creating multiple registration requests.

The vulnerability of the Mobile and Remote Access extensions of the microprogramming software for Cisco TelePresence Video Communication Servers exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to carry out attacks involving the creation of...

mysql: unspecified vulnerability related to Server:Security:Privileges (CPU April 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server : Security : Privileges...

I'm how to find Google on the server LFI vulnerability-vulnerability warning-the black bar safety net

This article describes how to use the local file inclusion vulnerability to read the the Google a server on any file. Vulnerability exists in Google's Feedburner, in the submission of the vulnerability, Google's security team quickly fixed the vulnerability. FeedBurner is what Wikipedia on the...

The vulnerability of the MySQL database management system allows a hacker to compromise the accessibility of data.

The vulnerability of the Server sub-component in the Security section of the MySQL database management system is related to code errors. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of data...

Code injection

Mobile Devices aka MDI C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, do not validate firmware updates, which allows remote attackers to execute arbitrary code by specifying an update server...

mysql: unspecified vulnerability related to Server:RBR (CPU July 2015)

Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to RBR...

mysql: unspecified vulnerability related to Server:Security:Privileges (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Server : Security : Privileges...

EMC Documentum Content Server Remote Lift Vulnerability (CNVD-2015-05447)

EMC Documentum Content Server is a content management service system from EMC. The system is mainly used to manage Documentum content repository, can create, modify and track documents and other operations. A remote elevation vulnerability exists in EMC Documentum Content Server. A remote attacke...

Cisco Media Convergence Server WebEx Node Open Redirect Vulnerability

WebEx Meeting Services is a hosted multimedia conferencing solution managed and maintained by Cisco WebEx. The Cisco WebEx Node for Media Convergence Server MCS suffers from an open redirection vulnerability in its implementation, which can be exploited by a remote attacker to redirect a user to ...

mysql: unspecified vulnerability related to Server:Security:Firewall (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows local users to affect availability via unknown vectors related to Server : Security : Firewall...

mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU April 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML...

GE Healthcare Centricity PACS Workstation and Server Trust Management Vulnerability

GE Healthcare Centricity PACS is a General Electric GE image archiving and transfer system PACS for the healthcare industry.Workstation is a PACS workstation; Server is a PACS server. A security vulnerability exists in GE Healthcare Centricity PACS Workstation and Server, which stems from the...

FreeBSD -- Resource exhaustion due to sessions stuck in LAST_ACK state

Problem Description: TCP connections transitioning to the LASTACK state can become permanently stuck due to mishandling of protocol state in certain situations, which in turn can lead to accumulated consumption and eventual exhaustion of system resources, such as mbufs and sockets. Impact: An...

CVE-2015-2662

Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to DHCP Server...

Remote code execution

The Remote Desktop Protocol RDP server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a series of crafted packets, aka "Remote Desktop Protocol RDP Remote Code Execution Vulnerability."...

php: use after free vulnerability in unserialize() with DateTimeZone

A use-after-free flaw was found in the unserialize function of PHP's DateTimeZone implementation. A malicious script author could possibly use this flaw to disclose certain portions of server memory...

The vulnerability of the microprogramming software of Siemens Simatic S7-1200 programmable logic controllers allows a intruder to perform inter-site fraudulently by manipulating requests.

The software of the programmable logic controller Simatic S7-1200 contains a vulnerability in its built-in server port 80 TCP and port 443 TCP. Exploiting this vulnerability allows for inter-site request forgery attacks...