Cisco Prime Collaboration Provisioning Hard-Coded Password Vulnerability

Cisco Prime Collaboration Provisioning PCP is a reliable and scalable Web-based provisioning solution for managing your company's critical next-generation communications services. A hard-coded account password vulnerability exists in Cisco Prime Collaboration Provisioning 11.6. A remote user coul...

CVE-2017-8949

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

BMC Track-It! Information Disclosure Vulnerability

BMC Track-It! is a fully integrated IT helpdesk and asset management solution for small and medium-sized businesses from BMC Software, USA. The solution provides work order tracking, change management, process automation, asset inventory and asset management. A security vulnerability exists in...

CVE-2018-2594

Vulnerability in the Hyperion BI+ component of Oracle Hyperion subcomponent: Foundation UI & Servlets. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion BI+. Successful attacks...

CVE-2018-2578

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37630)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability exists in the handling of NVBUBackup Get method requests in Quest NetVault Backup versions prior to 11.4.5, which stems from the program failing to properly detect user-submitted strin...

Quest NetVault Backup SQL Injection Vulnerability (CNVD-2017-37636)

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. A SQL injection vulnerability in the handling of NVBUSourceDeviceSet Get method requests in Quest NetVault Backup versions prior to 11.4.5 stems from the program's failure to properly detect user-submitted strings...

Apple iOS Memory Corruption Vulnerability (CNVD-2018-00597)

Apple iOS is an operating system developed by Apple for mobile devices, and Mail is one of the mail clients. A security vulnerability exists in the Mail component of Apple iOS prior to version 11.2. An attacker can exploit this vulnerability to cause the system to use incorrect certificates for...

CVE-2017-15525

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a denial of service DoS attack, which is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting...

Apple iOS Phone Information Disclosure Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. in the U.S. Phone is one of the components that provides telephony functionality. A security vulnerability exists in the Phone component in versions of Apple iOS prior to 11. This vulnerability can be exploited by a local...

Apple iOS Time has an unspecified vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.Time component is one of the time components. A security vulnerability exists in the Time component of Apple iOS prior to version 11, which arises from the possibility that the program fails to properly handle the use of...

Apple iOS and Safari WebKit Information Disclosure Vulnerability (CNVD-2017-32433)

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; WebKit is an open-source web browser engine developed by KDE, Apple, Google,...

Oracle Communications Policy Management Unauthorized Operation Vulnerability

Oracle Communications Applications is a suite of Oracle applications for rapidly delivering and monetizing digital life communications.Oracle Communications Policy Management is one of the communications policy management components. A security vulnerability exists in the Portal, CMP subcomponent...

CVE-2017-14083

A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScan encryption file...

Artifex MuPDF Denial of Service Vulnerability (CNVD-2017-35028)

Artifex MuPDF is a free, lightweight PDF reader from Artifex Software. A security vulnerability exists in Artifex MuPDF version 1.11. The vulnerability can be exploited by an attacker to cause a denial of service with the help of a specially crafted .xps file...

UBUNTU-CVE-2017-14687

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016cb4f" on Windows. This occurs because of mishandling of XML tag name...

DEBIAN-CVE-2017-14685

Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related to "Data from Faulting Address controls Branch Selection starting at mupdf+0x000000000016aa61" on Windows. This occurs because xpsloadlinksinglyphs in...

Apple iOS Safari Address Bar Forgery Vulnerability

Apple iOS and Safari are products of Apple Inc. Apple iOS is a set of operating systems developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems.Safari is one of the specialized components used in the Safari browser. A...

Apple Safari Address Bar Forgery Vulnerability

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; WebKit is an open-source web browser engine developed by KDE, Apple, Google,...

Apple iOS MobileBackup Backup Encryption Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and MobileBackup is one of the system backup components. A security vulnerability exists in the MobileBackup component in Apple iOS versions prior to 11. The vulnerability can be exploited by a remote attacker to read an...