Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-02078)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, and good reliability.MySQL Server is one of the server components.Server: InnoDB is one of the database engine components. A security vulnerability...

Primetek Primefaces Remote Code Execution Vulnerability

Primetek Primefaces is an open source use in the Java EE system UI library . A remote code execution vulnerability exists in version 5.x of Primetek Primefaces. A remote attacker could exploit this vulnerability to execute code...

UBUNTU-CVE-2017-17920

DISPUTED SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with...

DEBIAN-CVE-2017-17920

SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted...

Horde Groupware SQL Injection Vulnerability

Horde Groupware is an enterprise browser based on the Communication Suite from Horde USA. The browser supports sending and receiving e-mail, managing and sharing calendars, contacts and tasks, and more. A SQL injection vulnerability exists in Horde Groupware 5.2.22 and earlier versions. A remote...

Arbitrary File Deletion Vulnerability in Rice CMS v5.9.9

DAMI CMS is a free open-source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smartphone station building solutions. An arbitrary file deletion vulnerability exists in Daimi CMS version v5.9.9, which...

Trend Micro Encryption for Email DLL Loads Remote Code Execution Vulnerability

Trend Micro Encryption for Email is a suite of encryption technologies for email from Trend Micro. A security vulnerability exists in Trend Micro Encryption for Email version 5.6. A remote attacker could exploit the vulnerability to execute arbitrary code on an affected system...

Desdev DedeCMS SQL Injection Vulnerability (CNVD-2018-01088)

Desdev DedeCMS Dream Weaving Content Management System is China's Zhuozhuo network Desdev Technology Co., Ltd. of a set of open-source set of content publishing, editing, management and retrieval is equal to one of the PHP Web site content management system CMS. A SQL injection vulnerability exis...

UBUNTU-CVE-2017-10904

Qt for Android prior to 5.9.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors...

SQL Injection Vulnerability in Rice CMS v5.99

DAMI CMS is a free open-source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smartphone station building solutions. There is a SQL injection vulnerability in the back-end of DAMI CMS v5.99, which ca...

Qt for Android vulnerable to OS command injection

Overview Qt for Android provided by The Qt Company contains an OS command injection vulnerability CWE-78. Satoru Nagaoka of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A...

MOXA EDS-G512E Public and Private Key Extraction Vulnerability

The MOXA EDS-G512E is a Gigabit Ethernet managed switch. A public and private key extraction vulnerability exists in MOXA EDS-G512E 5.1 build 16072215. An attacker can exploit this vulnerability to extract the public and private keys from the firmware image available on the MOXA website and use...

MOXA EDS-G512E Information Disclosure Vulnerability (CNVD-2017-37713)

The MOXA EDS-G512E is a Gigabit Ethernet managed switch. An information disclosure vulnerability exists in MOXA EDS-G512E 5.1 build 16072215. An attacker can exploit this vulnerability to obtain sensitive information...

EximiousSoft Banner Maker v5.45 Handles BMP with Memory Corruption Vulnerability

EximiousSoft Banner Maker is an image manipulation tool. EximiousSoft Banner Maker suffers from a memory corruption vulnerability when processing the BMP format. An attacker can cause the program to crash by constructing a malformed BMP image, which if successfully exploited can lead to arbitrary...

NetApp OnCommand Unified Manager Unauthorized Operation Vulnerability

NetApp OnCommand Unified Manager is a set of ONTAP system management software from the U.S. company NetApp. The software can simplify data management, monitoring storage system infrastructure and detect faults. A security vulnerability exists in NetApp OnCommand Unified Manager versions prior to...

HashiCorp Vagrant VMware Fusion Plugin Elevation of Privilege Vulnerability (CNVD-2017-33966)

The HashiCorp Vagrant VMware Fusion plugin aka vagrant-vmware-fusion is a tool developed by HashiCorp in the United States for building and managing virtual machine environments on VMware virtual machines. A security vulnerability exists in the HashiCorp Vagrant VMware Fusion plugin version 5.0.0...

File Upload Vulnerability in V5.4 Backstage upload_bm1.asp Page of NetShow Shopping System

Net show shopping system is a shopping site developed with asp + access. A file upload vulnerability exists in the background uploadbm1.asp page of NetShow Shopping System V5.4. It allows an attacker to upload a webshell and gain server privileges...

Apache Traffic Server Access Bypass Vulnerability

Apache Traffic Server is the United States Apache Apache Software Foundation of an efficient , scalable HTTP proxy and caching server . A security vulnerability exists in Apache Traffic Server version 5.1.x prior to 5.1.1. A remote attacker could exploit this vulnerability to bypass access...

Apache Traffic Server Remote Code Execution Vulnerability

Apache Traffic Server is the United States Apache Apache Software Foundation of an efficient , scalable HTTP proxy and caching server . A security vulnerability exists in the HTTP/2 experimental feature of Apache Traffic Server versions 5.3.x prior to 5.3.1. A remote attacker can exploit this...

SQL Injection Vulnerability in WebShow Shopping System V5.4 listjp.asp

Net show shopping system is a shopping site developed with asp + access. A SQL injection vulnerability exists in NetShow Shopping System V5.4 listjp.asp. An attacker can obtain sensitive database information by constructing specific SQL statements...