Adobe Acrobat and Reader Memory Corruption Vulnerability (CNVD-2017-04753)

Adobe Acrobat and Reader is the United States Adobe developed a portable document format can be used to publish all the documents of the editing software. A memory corruption vulnerability exists in Adobe Acrobat and Reader, which can be exploited by an attacker to compromise a vulnerable system,...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-05119)

Adobe Flash Player is a software developed by Adobe, Incorporated, and is a widely used, proprietary multimedia program player. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by an attacker to compromise a vulnerable system and cause arbitrary code executio...

CVE-2016-8272

Huawei PC client software HiSuite 4.0.5.300OVE has an information leak vulnerability; an attacker who can log in to the system can copy out the user's proxy password, causing information leaks...

EMC Isilon OneFS Directory Traversal Vulnerability

EMC Isilon OneFS is a distributed file system that supports EMC Isilon Horizontally Scalable Storage System from EMC Corporation. The system combines the three layers of a traditional storage architecture file system, volume manager and data protection into a single unified software layer to crea...

CVE-2017-7258

HTTP Exploit in eMLi Portal in AuroMeera Technometrix Pvt. Ltd. eMLi allows an Attacker to View Restricted Information or even more seriously execute powerful commands on the web server which can lead to a full compromise of the system via Directory Path Traversal, as demonstrated by reading...

CVE-2017-7258

The CVE affects AuroMeera’s eMLi Suite: eMLi School Management 1.0, eMLi College Campus Management 1.0, and eMLi University Management 1.0. It is a Directory Path Traversal vulnerability caused by inadequate input validation in the eMLi Portal, enabling a remote attacker to view restricted inform...

SAP Cloud Commerce Platform HANA System Authentication Vulnerability

The SAP Cloud Commerce Platform HANA system is a real-time data computing platform based on in-memory computing technology. There are multiple vulnerabilities in the SAP Cloud Commerce Platform HANA system, one of the critical vulnerabilities is an authentication vulnerability that can be exploit...

Microsoft Active Directory Federation Services Information Disclosure

An information disclosure vulnerability exists when Windows Active Directory Federation Services ADFS honors XML External Entities. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target system. To exploit this conditio...

PT-2017-1646 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: The issue is caused by a buffer overflow in memory, allowing a remote attacker to execute arbitrary code or cause a denial of service memory corruption via a specially crafted...

Medium: exim

Issue Overview: It was found that Exim leaked DKIM signing private keys to the "mainlog" log file. As a result, an attacker with access to system log files could potentially access these leaked DKIM private keys. Affected Packages: exim Issue Correction: Run yum update exim or yum update --adviso...

Adobe Flash Player Memory Corruption Vulnerability (CNVD-2017-01782)

Adobe Flash Player is a widely used, proprietary multimedia program player developed by Adobe in the United States. A memory corruption vulnerability exists in Adobe Flash Player, which can be exploited by attackers to compromise a vulnerable system and cause arbitrary code execution...

EMC Documentum eRoom Management Password Change Authentication Bypass Vulnerability

EMC Documentum eRoom is a Web-based shared work platform from EMC that allows project staff to use the Web to store project content, communicate and share ideas, assign tasks, and manage deliverables. A security vulnerability exists in EMC Documentum eRoom. An attacker could exploit this...

EMC Documentum D2 Cross-Site Scripting Vulnerability (CNVD-2017-01159)

EMC Documentum D2 is an enterprise-class content management system from EMC. The system manages the entire information lifecycle through creation, modification, tracking and other functions, and it includes a number of extensions, such as Documentum Web Publisher Web Content Management, Documentu...

EMC Network Configuration Manager Remote Code Execution Vulnerability

EMC Network Configuration Manager NCM is an intelligent network configuration manager from EMC Corporation that automates model-based network compliance, change and configuration management to quickly perform network change and configuration management tasks. A remote code execution vulnerability...

CVE-2016-0890

EMC PowerPath Virtual Management Appliance 2.0, EMC PowerPath Virtual Management Appliance 2.0 SP1 is affected by a sensitive information disclosure vulnerability that may potentially be exploited by malicious users to compromise the affected system...

Path traversal

EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446 has a path traversal vulnerability that may potentially be exploited by malicious users to compromise the...

Information disclosure

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitive system file. A malicious administrator with configuration privileges may...

CVE-2017-2766

EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior to 7.5.0 P01 includes an unverified password change vulnerability that could potentially be exploited by malicious users to compromise th...

CVE-2017-2766

CVE-2017-2766 affects EMC Documentum eRoom: vulnerable in versions 7.4.4, 7.4.4 SP1, and prior to 7.4.5 P04 or 7.5.0 P01 due to an unverified password change vulnerability. This could allow a malicious user to compromise the affected system. According to the sources, the issue manifests in the pa...

CVE-2016-9870

EMC Isilon OneFS 8.0.0.0, EMC Isilon OneFS 7.2.1.0 - 7.2.1.2, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.1.10, and EMC Isilon OneFS 7.1.0.x is affected by an LDAP injection vulnerability that could potentially be exploited by a malicious user to compromise the system...