83 matches found
Tobesoft Xplatform Resource Management Error Vulnerability
Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports form and composite component inheritance, CSS autosetting, and multi-document interfaces. A resource management error vulnerability exists in Tobesoft Xplatform versions 9.1 through 9.2.2. An...
CVE-2019-4762
IBM MQ 9.0 and 9.1 is vulnerable to a denial of service attack due to an error in the Channel processing function. IBM X-Force ID: 173625...
Unspecified vulnerability in CIPPlanner CIPAce (CNVD-2020-21816)
CIPPlanner CIPAce is a suite of business process automation and application development platforms from the US-based CIPPlanner. A security vulnerability exists in CIPPlanner CIPAce version 9.1 Build 2019092801. An attacker can exploit the vulnerability to obtain the full path with the help of an...
McAfee Network Security Management Cross-Site Scripting Vulnerability (CNVD-2020-20985)
McAfee Network Security Management NSM is a suite of network security solutions from McAfee that enables real-time monitoring of deployed McAfee intrusion prevention systems across the network. A cross-site scripting vulnerability exists in McAfee NSM versions prior to 9.1. The vulnerability stem...
CVE-2020-7246
A remote code execution RCE vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code file via the profile photo functionality, by leveraging a path traversal vulnerability in the users'photoppreview' delete photo feature, allowing bypass of .htaccess protection...
CVE-2019-5250
Mate 20 Pro smartphones with versions earlier than 9.1.0.135C00E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation of certain privilege, the attacker could trick the user into installing a malicious application before the user turns on...
CVE-2019-8390
qdPM 9.1 suffers from Cross-site Scripting XSS in the searchkeywords parameter...
Unspecified Vulnerability in Oracle Hospitality Reporting and Analytics (CNVD-2019-36664)
Oracle Hospitality Reporting and Analytics is a web-based application that centralizes point-of-sale POS data, provides operational and analytical insights into business operations, and improves efficiencies by delivering information to all roles within an organization. An unspecified vulnerabili...
IBM Campaign HTML Injection Vulnerability
IBM Campaign formerly known as Unica Campaign is a management solution from IBM in the United States used to help marketers design, execute, measure, and optimize marketing advertising. An HTML injection vulnerability exists in IBM Campaign versions 9.1, 9.1.2, and 10, which can be exploited by...
SAP Business Process Automation By Redwood Path Traversal Vulnerability
SAP Business Process Automation BPA By Redwood is a suite of business process automation solutions from SAP, Germany. A directory traversal vulnerability exists in SAP BPA By Redwood versions 9.0 and 9.1, which arises from the program's failure to adequately filter user-submitted path information...
CVE-2018-8722
Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026...
CVE-2017-5811
A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...
Progress Sitefinity Cross-Site Scripting Vulnerability (CNVD-2018-05684)
Progress Sitefinity is an open source platform for building corporate websites and intranets. A cross-site scripting vulnerability exists in Progress Sitefinity version 9.1. The vulnerability can be exploited by remote attackers to inject malicious JavaScript code via the Last name, First name, a...
Unspecified Vulnerability in Oracle PeopleSoft Enterprise SCM eProcurement Component
Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise SCM eProcurement is one of the online procurement components. PeopleSoft...
IBM Tivoli Workload Scheduler Distributed OpenSSL command line utility information disclosure vulnerability
IBM Tivoli Workload Scheduler Distributed is a suite of enterprise task scheduling software from IBM, USA. The software enables automated, scheduled control of workloads.OpenSSL command line utility is one of the command line utilities. An information disclosure vulnerability exists in the OpenSS...
Oracle PeopleSoft Enterprise PRTL Interaction Hub Unauthorized Operation Vulnerability (CNVD-2017-28378)
Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PRTL Interaction Hub is one of the enterprise and Customer Interaction...
CVE-2017-7283
An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...
NetApp Data ONTAP Security Bypass Vulnerability
NetApp Data ONTAP is a set of storage operating system from American NetApp. The system supports the enhancement of the user's enterprise application performance and improve the flexibility of the data center and so on. A security vulnerability exists in NetApp Data ONTAP versions 9.0 and 9.1 pri...
ReadyDesk Arbitrary File Upload Vulnerability
ReadyDesk is a Web-based helpdesk software solution from ReadyDesk, Inc. An arbitrary file upload vulnerability exists in ReadyDesk version 9.1. A remote attacker can exploit this vulnerability by uploading or sending a request to a specially crafted page to execute arbitrary code...