Oracle Outside In Technology Access Control Error Vulnerability (CNVD-2019-27778)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

PT-2019-1997 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.25 and prior MySQL Server versions 8.0.15 and prior Description: The issue is related to inadequate access control in the MySQL Server component, specifically the Server: PS subcomponent. This can be exploited by a...

PT-2019-1963 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.15 and prior Description: The issue is related to a lack of access control in the MySQL Server component, specifically in the Server: Information Schema subcomponent. This allows a high-privileged attacker with netwo...

PT-2019-3927 · Apache · Apache Tomcat

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 9.0.0.M1 through 9.0.17 Apache Tomcat versions 8.5.0 through 8.5.39 Apache Tomcat versions 7.0.0 through 7.0.93 Description: The issue is related to the CGI Servlet in Apache Tomcat, which is vulnerable to Remote Code...

Android Permission License and Access Control Vulnerability (CNVD-2019-09145)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A privilege-granting and access-control vulnerability exists in the Framework in Android version 8.0, which stems from a lack of effective privilege-granting and access-control measures in a...

Pydio Cross-Site Scripting Vulnerability (CNVD-2019-14091)

Pydio AjaXplorer is a web-based remote file manager. The manager supports uploading and downloading files, online file editing, image previewing and more. A cross-site scripting vulnerability exists in Pydio version 8, which stems from a lack of proper validation of client-side data by the WEB...

Drupal cross-site scripting vulnerability (CNVD-2019-12155)

Drupal is an open source content management system developed by the Drupal community using the PHP language. A cross-site scripting vulnerability exists in Drupal version 7 prior to 7.65, version 8.6 prior to 8.6.13, and version 8.5 prior to 8.5.14, which stems from a lack of proper validation of...

zzcms SQL Injection Vulnerability (CNVD-2019-13260)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the /user/logincheck.php file in ZZCMS version 8.3. The vulnerability can be exploited by a remote attacker to execute SQL commands with the help of the 'X-Forwarded' parameter in the HTTP...

CVE-2018-17416

A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter...

CVE-2018-17413

XSS exists in zzcms v8.3 via the /uploadimgform.php noshuiyin parameter...

CVE-2019-4030

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

Dell RSA Authentication Manager Credential Management Vulnerability

Dell RSA Authentication Manager is a centralized suite of binary authentication software from Dell, Inc. The software centralizes the management of binary identities, security tokens, methods and users across physical sites. A credential management vulnerability exists in Dell RSA Authentication...

UsualToolCMS 8.0 Release frontend se***.php suffers from SQL Injection Vulnerability

UsualToolCMS UTCMS is a content management system and rapid site building framework. UsualToolCMS front-end se.php suffers from a sql injection vulnerability, which can be exploited by attackers to manipulate the database...

CVE-2019-3923

Nessus versions 8.2.1 and earlier were found to contain a stored XSS vulnerability due to improper validation of user-supplied input. An authenticated, remote attacker could potentially exploit this vulnerability via a specially crafted request to execute arbitrary script code in a user's browser...

CVE-2019-6523

WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands...

Advantech WebAccess/SCADA Authorization Issues Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software from Advantech based on browser architecture. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An authorization issue vulnerability exists in Advante...

CVE-2019-2472

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Unspecified Vulnerability in Oracle Argus Safety (CNVD-2019-37399)

Oracle Health Sciences Applications is a suite of Oracle's clinical development solutions for the healthcare industry, of which Argus Safety is a security component. A security vulnerability exists in the Login subcomponent of the Argus Safety component of Oracle Health Sciences Applications,...

Unspecified Vulnerability in Oracle Argus Safety (CNVD-2019-37397)

Oracle Health Sciences Applications is a suite of Oracle's clinical development solutions for the healthcare industry, of which Argus Safety is a security component. A security vulnerability exists in the Console subcomponent of the Argus Safety component of Oracle Health Sciences Applications,...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-28456)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...