Medium: exim

Issue Overview: It was found that Exim leaked DKIM signing private keys to the "mainlog" log file. As a result, an attacker with access to system log files could potentially access these leaked DKIM private keys. Affected Packages: exim Issue Correction: Run yum update exim or yum update --adviso...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-01782)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by attackers to compromise a vulnerable system and cause arbitrary code execution...

EMC Documentum eRoom Management Password Change Authentication Bypass Vulnerability

EMC Documentum eRoom is a Web-based shared work platform from EMC that allows project staff to use the Web to store project content, communicate and share ideas, assign tasks, and manage deliverables. A security vulnerability exists in EMC Documentum eRoom. An attacker could exploit this...

EMC Documentum D2 Cross-Site Scripting Vulnerability (CNVD-2017-01159)

EMC Documentum D2 is an enterprise-class content management system from EMC. The system manages the entire information lifecycle through creation, modification, tracking and other functions, and it includes a number of extensions, such as Documentum Web Publisher Web Content Management, Documentu...

EMC Network Configuration Manager Remote Code Execution Vulnerability

EMC Network Configuration Manager NCM is an intelligent network configuration manager from EMC Corporation that automates model-based network compliance, change and configuration management to quickly perform network change and configuration management tasks. A remote code execution vulnerability...

Path traversal

EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446 has a path traversal vulnerability that may potentially be exploited by malicious users to compromise the...

CVE-2016-0890

EMC PowerPath Virtual Management Appliance 2.0, EMC PowerPath Virtual Management Appliance 2.0 SP1 is affected by a sensitive information disclosure vulnerability that may potentially be exploited by malicious users to compromise the affected system...

Information disclosure

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may...

CVE-2017-2766

EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exploited by malicious users to compromise th...

CVE-2017-2766

CVE-2017-2766 affects EMC Documentum eRoom: vulnerable in versions 7.4.4, 7.4.4 SP1, and prior to 7.4.5 P04 or 7.5.0 P01 due to an unverified password change vulnerability. This could allow a malicious user to compromise the affected system. According to the sources, the issue manifests in the pa...

CVE-2016-9870

EMC Isilon OneFS 8.0.0.0, EMC Isilon OneFS 7.2.1.0 - 7.2.1.2, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, and EMC Isilon OneFS 7.1.0.x is affected by an LDAP injection vulnerability that could potentially be exploited by a malicious user to compromise the system...

Oracle Solaris Local Vulnerability (CNVD-2017-00976)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local security vulnerability exists in the Solaris component of Oracle Solaris version 11.3, which could be exploited by an attacker to compromise the...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-00378)

Adobe Flash Player is a proprietary multimedia program developed by Adobe, Incorporated, and is widely used. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise a vulnerable system and cause arbitrary code execution...

MS14-044: Description of the security update for SQL Server 2008 R2 Service Pack 2 (QFE): August 12, 2014

MS14-044: Description of the security update for SQL Server 2008 R2 Service Pack 2 QFE: August 12, 2014 Introduction A security issue has been identified in Microsoft SQL Server 2008 R2 Service Pack 2 that could allow an attacker to compromise your system and gain control over it. You can help...

MS14-044: Description of the security update for SQL Server 2014 (GDR): August 12, 2014

MS14-044: Description of the security update for SQL Server 2014 GDR: August 12, 2014 Introduction A security issue has been identified in Microsoft SQL Server 2014 that could allow an attacker to compromise your system and gain control over it. You can help protect your computer by installing th...

CVE-2016-9565

It was found that an attacker who could control the content of an RSS feed could execute code remotely using the Nagios web interface. This flaw could be used to gain access to the remote system and in some scenarios control over the system. Mitigation !/bin/bash mv...

Adobe Experience Manager cross-site scripting vulnerability (CNVD-2016-12347)

Adobe Experience Manager is a software developed by Adobe that provides marketers and IT with the agility to market online so they can engage new audiences and deliver targeted content. A cross-site scripting vulnerability exists in Adobe Experience Manager, which could be exploited by an attacke...

Adobe Experience Manager Cross-Site Request Forgery Vulnerability

Adobe Experience Manager is a free image reading and conversion tool from Adobe USA. A cross-site request forgery vulnerability exists in Adobe Experience Manager, which can be exploited by an attacker to compromise control of the system...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2016-12346)

Adobe Experience Manager is a software developed by Adobe USA that provides marketers and IT with the agility to market online so they can engage new audiences and deliver targeted content. A cross-site scripting vulnerability exists in Adobe Experience Manager, which can be exploited by an...

PT-2016-2972 · Microsoft · Chakra Javascript Engine +3

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Microsoft Internet Explorer affected versions not specified Microsoft Windows affected versions not specified Description: The issue is caused by a buffer overflow in the Chakra JavaScript engine...