275 matches found
SQL Injection Vulnerability in Tpshop v3.5 Sm***.php Page
Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the Tpshop v3.5 Sm.php page. Attackers can use the vulnerability to obtain sensitive information in the database...
SQL Injection Vulnerability in Tpshop v3.5 Or***.php Page
Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the Tpshop v3.5 Or.php page. An attacker can exploit the vulnerability to obtain sensitive information from the database...
SQL injection vulnerability in Tpshop v3.5 Go***.php page (CNVD-2019-18760)
Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the Tpshop v3.5 Go.php page. Attackers can use the vulnerability to obtain sensitive information in the database...
Lenovo XClarity Integrator for Vmware and Microsoft System Center File Write Vulnerability
Lenovo XClarity Integrator LXCI for Vmware is an application for Vmware from Lenovo, China. The program provides extended functionality for infrastructure resource management, automation, and IT service management.LXCI for Microsoft System Center is a version for Microsoft System Center. A securi...
Dialogic PowerMedia XMS password plaintext storage vulnerability (CNVD-2019-19212)
Dialogic PowerMedia XMS is a suite of software multimedia servers for real-time communications from Dialogic, Inc. that provide real-time multimedia communication solutions for IMS, MRF, enterprise and WebRTC applications. A password plaintext storage vulnerability exists in the...
Dialogic PowerMedia XMS Hardcoded Credentials Vulnerability
Dialogic PowerMedia XMS is a suite of software multimedia servers for real-time communications from Dialogic, Inc. that provide real-time multimedia communication solutions for IMS, MRF, enterprise and WebRTC applications. A hard-coded credentials vulnerability in the...
DEBIAN-CVE-2018-11685
Liblouis 3.5.0 has a stack-based Buffer Overflow in the function compileHyphenation in compileTranslationTable.c...
CVE-2018-9106
CSV Injection aka Excel Macro Injection or Formula Injection exists in the export feature in the Acyba AcySMS extension before 3.5.1 for Joomla! via a value that is mishandled in a CSV export...
CVE-2018-3811
SQL Injection vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to execute SQL queries in the context of the web server. The saveGoogleAdWords function in smartgooglecode.php did not use prepared statements and did not sanitize...
CVE-2017-9947
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions V3.5. A directory traversal vulnerability could allow a remote attacker with network access to the integrated web server 80/tcp and 443/tcp to obtain information on the structure o...
EMC AppSync Host Plug-in Denial of Service Vulnerability
EMC AppSync is a suite of data protection software from EMC Corporation USA. The software provides simple, self-service, Service Level Agreement SLA-driven data protection and storage management for EMC VNX and EMC VMAX storage.Host Plug-in is one of the host plug-ins. A denial of service...
SUSE-SU-2017:2315-1 Security update for libreoffice
LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements: Writer: - New 'Go to Page' dialog for quickly jumping to another page. - Support for 'Table Styles'. - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc: - New...
Synology Download Station Cross-Site Request Forgery Vulnerability
Synology Download Station is a set of web-based download applications from Synology. The program supports BT, FTP and HTTP protocols to download files. A server-side request forgery vulnerability exists in Downloader in Synology Download Station version 3.8.x before 3.8.5-3475 and version 3.x...
CVE-2017-1373
Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866...
YARA Denial of Service Vulnerability
YARA is a set of tools used to help software researchers identify and categorize malware samples. A denial of service vulnerability exists in the regex component in YARA 3.5.0. A remote attacker can exploit this vulnerability to cause a denial of service by mishandling a rule rule in the yrreexec...
PT-2017-16760
Name of the Vulnerable Software and Affected Versions YARA version 3.5.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based out-of-bounds read and application crash. This occurs when a crafted rule is mishandled in the yara yyparse function...
CVE-2016-9737
IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1996200...
Multiple memory corruption vulnerabilities in Linux kernel 'net/core/sock.c'
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A memory corruption vulnerability exists in versions of Linux kernel prior to 3.5. An attacker could exploit this vulnerability to cause a denial of service memory consumption...
UBUNTU-CVE-2016-4553
clientside.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via an HTTP request...