CVE-2018-2921

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface. The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-19501)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

SearchBlox Cross-Site Request Forgery Vulnerability (CNVD-2018-13281)

SearchBlox is the U.S. SearchBlox company a set of open source and free of charge based on Lucene full-text search engine toolkit to build enterprise search and analytics solutions. The program provides a Web-based management interface , you can manage the entire search system . A cross-site...

IBM WebSphere MQ Managed File Transfer Information Disclosure Vulnerability

IBM WebSphere MQ is a messaging middleware product from IBM, USA. It provides a reliable and proven messaging backbone for Service Oriented Architecture SOA.IBM WebSphere MQ Managed File Transfer is one of the tools used to manage file transfers in the system. A security vulnerability exists in I...

CVE-2018-13056

An issue was discovered on zzcms 8.3. There is a vulnerability at /user/del.php that can delete any file by placing its relative path into the zzcmsmain table and then making an img add request. This can be leveraged for database access by deleting install.lock...

Arbitrary File Deletion Vulnerability in ZZCMS Version 8.3

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. An arbitrary file deletion vulnerability exists in ZZCMS version 8.3. An attacker can exploit the vulnerability to delete arbitrary files...

Polaris Office Arbitrary Code Execution Vulnerability

Infraware Polaris Office is a suite of office software developed by Infraware Korea for mobile devices. The software is mainly used for viewing and editing Word documents, Excel tables, PowerPoint files and so on. A security vulnerability exists in Infraware Polaris Office 2017 version 8.1. An...

Natus Xltek NeuroWorks Buffer Overflow Vulnerability (CNVD-2018-12133)

Natus Xltek NeuroWorks is a suite of versatile software platforms for EEG testing, long-term monitoring, ICU monitoring and sleep studies from Natus Medical, USA. A buffer overflow vulnerability exists in the RequestForPatientInfoEEGfile feature in Natus Xltek NeuroWorks version 8. A remote...

Natus Xltek NeuroWorks Denial of Service Vulnerability

Natus Xltek NeuroWorks is a suite of versatile software platforms for EEG testing, long-term monitoring, ICU monitoring and sleep studies from Natus Medical, USA. A denial of service vulnerability exists in the use of the return value of the NewProducerStream command in Natus Xltek NeuroWorks...

Natus Xltek NeuroWorks Buffer Overflow Vulnerability (CNVD-2018-12132)

Natus Xltek NeuroWorks is a suite of versatile software platforms for EEG testing, long-term monitoring, ICU monitoring and sleep studies from Natus Medical, USA. A buffer overflow vulnerability exists in the OpenProducer feature in Natus Xltek NeuroWorks version 8. A remote attacker could exploi...

SUSE-SU-2018:1738-1 Security update for java-1_8_0-ibm

IBM Java was updated to version 8.0.5.15 bsc1093311, bsc1085449 Security fixes: - CVE-2018-2826 CVE-2018-2825 CVE-2018-2814 CVE-2018-2794 CVE-2018-2783 CVE-2018-2799 CVE-2018-2798 CVE-2018-2797 CVE-2018-2796 CVE-2018-2795 CVE-2018-2800 CVE-2018-2790 CVE-2018-1417 - Removed translations in the...

Node.js Denial of Service Vulnerability (CNVD-2018-11810)

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

CVE-2017-1474

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606...

VulnCheck KEV: CVE-2014-2623

Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors...

Natus Medical Buffer Overflow Vulnerability

Natus Xltek NeuroWorks is a suite of versatile software platforms for EEG testing, long-term monitoring, ICU monitoring and sleep studies from Natus Medical, USA. An out-of-bounds read vulnerability exists in the traversal of the list function in Natus Xltek NeuroWorks version 8. An attacker coul...

SAP Identity Management Information Disclosure Vulnerability

SAP Identity Management is a suite of identity management applications from SAP that can be embedded into business processes. A security vulnerability exists in SAP Identity Management version 8.0. An attacker could exploit the vulnerability to access restricted information...

Oracle Hospitality Applications Hospitality Suite8 Component Denial of Service Vulnerability

Oracle Hospitality Applications is a set of business applications, servers and storage solutions for hospitality management from Oracle. The program provides human resources cost management, provide customers throughout the journey to track the management of services to improve customer...

Denial of Service Vulnerability in RSA Authentication Manager

Dell EMC RSA Authentication Manager is a centralized suite of binary authentication software from Dell USA. The software centralizes the management of binary identities, security tokens, methods, and users across physical sites.RSA Authentication Manager Security Console is one of the security...

Stored XSS Vulnerability in zzcms v8.2

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. There is a stored xss vulnerability in ZZCMS version 8.2, through which an attacker can steal administrator cookie information, combined with csrf to operate the backend and so on...

CVE-2018-2854

Vulnerability in the Oracle Financial Services Basel Regulatory Capital Basic component of Oracle Financial Services Applications subcomponent: Portfolio, Attribution. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network...