PT-2018-18746 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: zzcms version 8.2 Description: The issue allows SQL injection via the id parameter in an "adv2.php?action=modify" request. Recommendations: For zzcms version 8.2, avoid using the id parameter in the "adv2.php?action=modify" request until the...

PT-2018-18745 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: zzcms version 8.2 Description: An issue in zzcms allows PHP code injection via the siteurl parameter to the "install/index.php" endpoint, enabling the injection of PHP code, such as a phpinfo call, into "/inc/config.php". Recommendations: For...

SQL Injection Vulnerability in ZZCMS Version 8.2

Webmaster Merchants Content Management System ZZCMS developed by the ZZCMS team, into the database optimization, content caching, AJAX and other technologies, open source, independent functional modules, to facilitate secondary development. There is a SQL injection vulnerability in ZZCMS version...

Schneider Electric PowerSCADA Anywhere and Citect Anywhere Cross-Site Request Forgery Vulnerability

Schneider Electric PowerSCADA Anywhere and Citect Anywhere are products of Schneider Electric, France.Schneider Electric PowerSCADA Anywhere is a substation monitoring system. Schneider Electric PowerSCADA Anywhere is a substation monitoring system, PowerSCADA Expert is a data acquisition softwar...

ZZCMS Information Disclosure Vulnerability

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A security vulnerability exists in ZZCMS version 8.2. A remote attacker can exploit the vulnerability by sending a direct request to the file 3/qqconnect2.0/API/class/ErrorCase.class.php or...

SQL Injection Vulnerability in zzcms 8.2 user/msg.php File

zzcms is an enterprise website builder program It is an enterprise website builder program. An SQL injection vulnerability exists in the user/msg.php file of zzcms version 8.2, which can be exploited by attackers to access or modify database information...

TRITON AP-EMAIL File Access Vulnerability

Websense TRITON AP-EMAIL is a suite of email security solutions from Websense USA. The solution identifies targeted attacks, high-risk users and insider threats, while enabling mobile workers to take countermeasures and ensure their secure use of technologies such as Microsoft Office 365. The...

CVE-2016-0246

Cross-site scripting XSS vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-4792

Pulse Connect Secure PCS 8.2 before 8.2r1 allows remote attackers to disclose sign in pages via unspecified vectors...

PT-2016-6143 · Pulse · Pulse Connect Secure

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure PCS versions 7.4 through 7.4r13.3 Pulse Connect Secure PCS versions 8.0 through 8.0r8 Pulse Connect Secure PCS versions 8.1 through 8.1r1 Pulse Connect Secure PCS versions 8.2 through 8.2r0 Description: A cross-site...

PT-2016-6145 · Pulse · Pulse Connect Secure

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure PCS versions 7.4 through 7.4r13.3 Pulse Connect Secure PCS versions 8.0 through 8.0r8 Pulse Connect Secure PCS versions 8.1 through 8.1r1 Pulse Connect Secure PCS versions 8.2 through 8.2r0 Description: The administrative...

PT-2016-6142 · Pulse · Pulse Connect Secure

Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure PCS versions 7.4 through 7.4r13.3 Pulse Connect Secure PCS versions 8.0 through 8.0r9 Pulse Connect Secure PCS versions 8.1 through 8.1r1 Pulse Connect Secure PCS versions 8.2 through 8.2r0 Description: The issue allows...

EMC Unisphere for VMAX vApp Manager Arbitrary File Write Vulnerability

EMC Unisphere for VMAX is a set of management interfaces for the VMAX storage family from EMC Corporation USA. An arbitrary file write vulnerability exists in the HTTP servlet in vApp Manager in EMC Unisphere for VMAX versions prior to 8.2.0, which can be exploited by a remote attacker to write...

Dell OpenManage Server Administrator Directory Traversal Vulnerability

Dell OpenManage Server Administrator OMSA is a set of system management solutions from Dell Dell. A directory traversal vulnerability exists in Dell OMSA version 8.2, which can be exploited by a remote attacker to read arbitrary files with the help of ... \ string to read arbitrary files...

PT-2014-1324 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2 before 8.25.47 Cisco Adaptive Security Appliance ASA Software versions 8.4 before 8.47.5 Cisco Adaptive Security Appliance ASA Software versions 8.7 before 8.71.11 Cisco Adaptive...

PT-2013-5595 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2.x through 8.25.45 Cisco Adaptive Security Appliance ASA Software versions 8.3.x through 8.32.38 Cisco Adaptive Security Appliance ASA Software versions 8.4.x through 8.45 Cisco...

CVE-2009-5087

Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files via a .. dot dot in a GET request...

PT-2011-1637 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.23 Description: A memory leak issue allows remote attackers to cause a denial of service by making multiple incorrect LDAP authentication attempts. Recommendations...

PT-2010-3250 · Cisco · Cisco Asa +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 7.2 through 7.24 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.0 through 8.05.18 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8...

PT-2008-3244 · Autonomy · Worksite Web

Name of the Vulnerable Software and Affected Versions: WorkSite Web versions 8.2 before SP1 P2 Description: The issue allows remote attackers to cause a denial of service, specifically memory consumption, via a large number of SendNrlLink directives. This results in opening a separate window for...