Oracle Agile PLM Information Disclosure Vulnerability (CNVD-2016-05328)

Oracle Agile Product Lifecycle Management PLM solutions enable organizations to manage product information, processes, and decisions across a global product network throughout the product lifecycle. A security vulnerability exists in Oracle Supply Chain Products Suite version 9.3.4, 9.3.5, Oracle...

Micro Focus Rumba Stack Buffer Overflow Vulnerability

Micro Focus Rumba is a terminal emulation solution using UI technology from Micro Focus UK. The solution supports users in accessing core applications from desktop, web and mobile devices. Micro Focus Rumba 9.4 HF 13960 A stack buffer overflow vulnerability exists in COM objects in previous 9.4.x...

CVE-2016-0304

The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J...

Unitronics VisiLogic OPLC IDE Stack Buffer Overflow Vulnerability

Unitronics VisiLogic OPLC IDE is a suite of Human Machine Interface HMI and PLC application programming environments for use in the Vision and SAMBA series of controllers from Unitronics Israel. A stack buffer overflow vulnerability exists in the Unitronics VisiLogic OPLC IDE prior to version...

HPE Network Node Manager Cross-Site Scripting Vulnerability (CNVD-2016-02909)

HP Network Node Manager i-series NNMi software delivers powerful out-of-the-box features to help your network operations team efficiently manage networks of any size. A cross-site scripting vulnerability exists in HPE Network Node Manager i NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.01, whic...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HCM Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability in the ePerformance subcomponent of the...

CVE-2016-0590

Unspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors...

Unitronics VisiLogic OPLC IDE Arbitrary Code Execution Vulnerability

The Unitronics VisiLogic OPLC IDE is Unitronics' suite of Human Machine Interface HMI and PLC application programming environments for the SAMBA family of controllers. A security vulnerability exists in Unitronics VisiLogic OPLC IDE version 9.8.0.0 and earlier. Due to the program failing to...

CVE-2015-7905

Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors...

Cisco Unified Web and E-mail Interaction Manager Cross-Site Scripting Vulnerability

Cisco Unified Web and E-mail Interaction Manager are both products in Cisco's Customer Collaboration Contact Center.Web Interaction Manager is a product that helps call center agents answer customer questions using websites and text chat or real-time Web collaboration; E-mail Interaction Manager ...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-04616)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A memory corruption vulnerability exists in Microsoft Internet Explorer version 9, which allows remote attackers to exploit the...

TCCMSV9.0 Latest Version SQL Injection Vulnerability

TCCMS is a content management system. TCCMSV9.0 has multiple SQL injection vulnerabilities in app/controller/news.class.php, which can be exploited by attackers to either obtain sensitive database information...

PostgreSQL 'snprintf()' Information Disclosure Vulnerability

PostgreSQL is an object-relational database management system that supports an extended subset of SQL standards. In PostgreSQL versions 9.3 and 9.4, the replacement implementation of the function snprintf fails to check for errors reported by the lower-level database, which may result in...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-02447)

Microsoft Internet Explorer is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Internet Explorer version 9 that could allow an attacker to execute arbitrary code or cause a denial of service memory corruption by constructing a malicious WEB page...

CA Spectrum Cross-Site Scripting Vulnerability

CA Spectrum formerly known as CA Spectrum Infrastructure Manage is a set of converged infrastructure management software developed by CA. The software provides fault management, application performance management and failure cause analysis and other functions. A cross-site scripting vulnerability...

FAST/TOOLS vulnerable to improper restriction of XML external entity references

Overview FAST/TOOLS provided by Yokogawa Electric Corporation contains a vulnerability where XML external entity XXE references are not properly restricted CWE-611. Timur Yunusov, Alexey Osipov and Ilya Karpov of Positive Technologies reported this vulnerability to JPCERT/CC. JPCERT/CC coordinate...

PT-2014-1324 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2 before 8.25.47 Cisco Adaptive Security Appliance ASA Software versions 8.4 before 8.47.5 Cisco Adaptive Security Appliance ASA Software versions 8.7 before 8.71.11 Cisco Adaptive...

CVE-2014-2104

Multiple cross-site scripting XSS vulnerabilities in the Business Voice Services Manager BVSM page in Cisco Unified Communications Domain Manager 9.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCum78536, CSCum78526, CSCum69809, and...

PT-2014-3803 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software version 9.1.3 and earlier Description: A race condition in the Phone Proxy component allows remote attackers to bypass sec db authentication and provide certain pass-through services to untrusted...

PT-2013-5595 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliance ASA Software versions 8.2.x through 8.25.45 Cisco Adaptive Security Appliance ASA Software versions 8.3.x through 8.32.38 Cisco Adaptive Security Appliance ASA Software versions 8.4.x through 8.45 Cisco...