1536 matches found
PHPcmsV9.6 latest version of the background of the existence of file contains a vulnerability
PHPCMS is a website management software. A file inclusion vulnerability exists in the backend of the latest version of PHPcmsV9.6. An attacker can exploit this vulnerability to include a one-sentence Trojan horse and gain administrative privileges on the web server...
HPESBUX03747 rev.1 - HP-UX running BIND, Remote Denial of Service
Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX DNS and BIND Software B.11.31 - BIND 9.9.4 prior to C.9.9.4.10.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-3135 |...
PT-2017-3936 · Artifex +3 · Artifex Ghostscript +3
Name of the Vulnerable Software and Affected Versions: Artifex Ghostscript versions prior to 9.24 Description: The issue is related to the .setdistillerkeys PostScript command, which is accepted even though it is not intended for use during document processing. This leads to memory corruption,...
IBM License Metric Tool and BigFix Inventory Security Bypass Vulnerability
The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...
CVE-2016-8962
IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 118851...
CVE-2017-3570
Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products subcomponent: eSettlements. The supported version that is affected is 9.1. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise...
CVE-2017-3522
Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection component of Oracle PeopleSoft Products subcomponent: Vendor. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...
CVE-2017-3521
Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products subcomponent: Supplier Registration. The supported version that is affected is 9.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise...
PHPCMS V9 Full Version Has Reflective XSS Vulnerability
PHPCMS is a web content management system based on PHP and Mysql architecture. PHPCMS V9 full version of the existence of reflective XSS vulnerability, an attacker can use this vulnerability to web form to insert XSS execution code, pop-up box operation, access to user cookies and other sensitive...
Unitrends Enterprise Backup api/includes/systems.php Remote Code Execution Vulnerability
Unitrends Enterprise Backup is a suite of enterprise-grade data protection software from the US-based Unitrends. The software provides data backup, data recovery and deduplication features. A security vulnerability exists in the api/includes/systems.php file in versions of Unitrends Enterprise...
CVE-2017-7283
An authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS commands by sending a specially crafted filename to the /api/restore/download-files endpoint, related to the downloadFiles function in api/includes/restore.php...
Oracle PeopleSoft Enterprise SCM eBill Payment Remote Vulnerability
Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle, which provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise SCM eBill Payment is one of the electronic billing display solution...
Artifex Software Ghostscript Denial of Service Vulnerability
Ghostscript is a set of Adobe-based, PostScript and portable document format PDF page description language and compiled into the free software. A denial of service vulnerability exists in Artifex Software Ghostscript version 9.20 that could allow a remote attacker to cause a denial of service NUL...
Novell eDirectory Security Bypass Vulnerability
Novell eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from Novell, USA. The platform provides authentication policies, data backup and recovery services, data disaster recovery and other functions. A...
IBM Call Center for Commerce Cross-Site Scripting Vulnerability
IBM Call Center for Commerce is a Web-based call center solution. The solution supports providing CSRs Customer Service Representatives with a single point of access to business information as well as comprehensive multi-channel interactions with customers. A cross-site scripting vulnerability...
CVE-2017-7230
A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request...
Pharos PopUp Printer Client Heap Buffer Overflow Vulnerability
Pharos PopUp Printer Client is a suite of printer client software from Pharos Systems International. A heap buffer overflow vulnerability exists in Pharos PopUp Printer Client version 9.0. An attacker could exploit this vulnerability to execute arbitrary code in the context of the affected...
NetApp Data ONTAP Security Bypass Vulnerability
NetApp Data ONTAP is a set of storage operating system from American NetApp. The system supports the enhancement of the user's enterprise application performance and improve the flexibility of the data center and so on. A security vulnerability exists in NetApp Data ONTAP versions 9.0 and 9.1 pri...
IBM BigFix Inventory and License Metric Tool Information Disclosure Vulnerability
IBM BigFix Inventory and License Metric Tool are both products of IBM USA. The former is a set of software for endpoint security review and mitigation applied to information security management, and the latter is a set of free tools applied to IT service management used to help determine processo...