237 matches found
Cloudera CDH Setry Authorization Bypass Vulnerability
CDH is the most complete, tested and widely deployed distribution of Apache Hadoop.CDH is 100% open source and is the only Hadoop solution that offers batch processing, interactive SQL and interactive search, and enterprise-grade continuous availability. A Setry authorization bypass vulnerability...
CVE-2016-8314
Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications subcomponent: Core. Supported versions that are affected are 5.1.0, 5.2.0 and 11.5.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise...
Unspecified Vulnerability in Oracle Virtualization Secure Global Desktop (CNVD-2016-10287)
Oracle Virtualization is a suite of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the desktop to the data center.Oracle Secure Global Desktop S...
IBM Sterling B2B Integrator Password Change Vulnerability
IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A password change vulnerability exists in IBM Sterling B2B...
CVE-2016-5946
Directory traversal vulnerability in IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. dot dot in a URL...
AlienVault OSSIM and USM Cross-Site Scripting Vulnerabilities
AlienVault OSSIM and USM are both products of AlienVault Corporation, U.S.A. OSSIM is an open source security information management system. USM is a security management platform that provides security monitoring, security event management and reporting, and threat awareness system. A cross-site...
Multiple vulnerabilities in ZOHO WebNMS Framework (CNVD-2016-06372)
ZOHO WebNMS Framework is the United States ZhuoHao ZOHO company's set of framework for building network management applications. A directory traversal vulnerability, an information disclosure vulnerability, and a user impersonation vulnerability exist in versions 5.2 and 5.2 SP1 of the ZOHO WebNM...
CVE-2016-1465
Cisco Nexus 1000v Application Virtual Switch AVS devices before 5.21SV31.5i allow remote attackers to cause a denial of service ESXi hypervisor crash and purple screen via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985...
CVE-2016-0501
Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.2 allows remote attackers to affect availability via vectors related to SGD Core...
IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2015-07814)
IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates essential B2B processes, transactions and relationships. A cross-site scripting vulnerability in IBM Sterling B2B Integrator version 5.2 can be exploited by an attacker to steal cookie-based authentication and execute...
CVE-2015-4992
IBM Sterling B2B Integrator 5.2 before 50205008 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors...
Cisco ASR 9000 IOS DHCPv6 Server Denial of Service Vulnerability
Cisco IOS on ASR 9000 is a set of operating systems from Cisco that run on 9000 series router devices. A denial of service vulnerability exists in the DHCPv6 server in Cisco IOS on Cisco ASR 9000 devices using software version 5.2.0 Base. A remote attacker could exploit this vulnerability by...
Fortinet FortiGate FortiOS Security Bypass Vulnerability
Fortinet FortiGate running FortiOS is a set of security operating system developed by American Fitta Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security feature...
Tiki Wiki CMS Groupware Cross-Site Scripting Vulnerability
Tiki Wiki CMS Groupware is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. A cross-site scripting vulnerability exists in Tiki Wiki CMS Groupware...
Tiki Wiki CMS Groupware Local File Inclusion Vulnerability
Tiki Wiki CMS Groupware is a suite of open source content management and portal applications from the Tiki software community that can be used to create web applications, portals, corporate intranets, extranets, and more. A local file inclusion vulnerability exists in Tiki Wiki CMS Groupware...
t1lib: Invalid pointer dereference via crafted Type 1 font
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf...