The vulnerability of the Windows operating system allows a perpetrator to obtain information that can be used to compromise the target system.

The vulnerability of the Windows DVD Maker application on the Windows operating system is related to improper correction of processed files. Exploiting this vulnerability allows a malicious actor, operating remotely, to obtain information that can be used to compromise the target system using a...

CIIC Xi'an Recruitment System Exploits Universal Password Login Vulnerability

CIIC Xi'an Recruitment System is a resume information saving and entry system. CIIC Xi'an Recruitment System suffers from a universal password login vulnerability. An attacker who enters the universal password 'or '1'='1 or 'or'='or' can log in and view sensitive user information...

CVE-2016-10187

The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...

Windows Uniscribe Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Uniscribe improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could exploit the...

CVE-2017-0508

An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing th...

CVE-2017-3841

A vulnerability in the web interface of the Cisco Secure Access Control System ACS could allow an unauthenticated, remote attacker to disclose sensitive information. More Information: CSCvc04854. Known Affected Releases: 5.82.5...

CVE-2016-8942

IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server...

CVE-2016-5197

Removed by vendor...

The vulnerability of the Android operating system, which allows a intruder to gain unauthorized access to the supervisor’s memory

The vulnerability of the Android operating system’s supervisor exists due to insufficient checking of input data. Exploiting this vulnerability can allow an intruder, operating locally, to gain unauthorized access to the supervisor’s memory using HLOS...

Downloads Resources over HTTP

Overview Affected versions of product-monitor insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code...

Schoolhos CMS 2.29 - 'kelas' SQL Injection

Document Title: =============== Schoolhos CMS v2.29 - kelas Data Siswa SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1931 Release Date: ============= 2016-11-07 Vulnerability Laboratory ID VL-ID:...

SQL Injection Vulnerability in DMCODE Parameter of Beijing Imagine Star Cloud Service Center System with Book Discs

The Cloud Service Center System of Imagine Star accompanying CD-ROM is a system platform for the management of accompanying CD-ROM for libraries, archives, electronic reading rooms and other departments. There is a SQL injection vulnerability in the DMCODE parameter of the Beijing Imagine Star Bo...

Netnifty Nebula Internet Behavior Management System Exploits Information Leakage Vulnerabilities

Leadsec Internet Behavior Management System referred to as Leadsec ACM is an all-round solution for Internet access users in terms of information content security, network application management, organizational operational efficiency, network resource utilization, legal risk avoidance and network...

PHPCMS V9 has a design flaw

PHPCMS is a content management system. A design vulnerability exists in the uc function under PHPCMS V9 yoursite\phpssoserver\phpcms\modules\admin\system.php, which can be exploited by attackers to gain control of the web server...

Arbitrary File Download Vulnerability in Beijing Zhiqingweiye Submission System

Beijing Zhiqingweiye Submission System is a CMS system for all kinds of topics or magazines, which can be submitted remotely. The product has an arbitrary file download vulnerability, the vulnerability URL is: /Admin/Upload/Index?path=%2Fweb.config&fileName=%E9%99%84%E5%9B%BE&Browser=IE, an...

Ganglia Authentication Bypass Vulnerability

Ganglia is a cross-platform, scalable, distributed monitoring system for high-performance computing systems. Ganglia suffers from an authentication bypass vulnerability. An attacker can exploit the vulnerability to bypass the authentication mechanism and perform unauthorized actions...

Arbitrary File Containment Vulnerability in VoIP Operation Support System of Kunshi Network Technology Co.

The VoIP operation support system of Kunshi Network Technology Co., Ltd. is a support system for small and medium-sized VoIP operation business. The product suffers from an arbitrary file inclusion vulnerability, which can be exploited by an attacker to read sensitive files such as the service...

File Containment Vulnerability in Release Software Management System

Shanghai Sharp Education Software Co., Ltd. is an education solution provider. The release of the sharp software management system '/findPortalNewsBycategoryIdAndTopPortalNewsAction.action?siteId=...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Wi-Fi component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...

The vulnerability of the Android operating system, which allows a hacker to bypass security measures and delete data

The vulnerability of the Setup Wizard component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker acting locally to bypass security measures and delete data...