Oracle PeopleSoft Enterprise HCM Component Remote Data Read Vulnerability

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the human capital management HCM components. A remote data read...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise HCM (CNVD-2016-09930)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise HCM is one of the Human Capital Management HCM components. An unspecified...

ZOHO ManageEngine ServiceDesk Plus Privilege Vulnerability

ZOHO ManageEngine ServiceDesk is the United States ZhuoHao ZOHO company's set of web-based help desk HelpDesk and asset management software. An elevation of privilege vulnerability exists in ManageEngine ServiceDesk Plus 9.0 and prior versions, which can be exploited by an attacker to gain...

Kerio Control Cross-Site Scripting Vulnerability

Kerio Control is a simple and fast unified threat management system. Cross-site scripting attack vulnerabilities in Kerio Control version 9.1.3 can be exploited by an attacker to execute arbitrary script code in the context of an affected site, steal cookie-based authentication, disclose sensitiv...

PHPCMS V9 badword.php file SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 badword.php file, which allows attackers to exploit the vulnerability to...

PHPCMS V9 Trojan Bypass Configuration Vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. PHPCMS V9 Trojan horse checking at the existence of bypass configuration vulnerability, allowing attackers to exploit the...

PT-2016-3354

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.5 Description The issue is related to the kernel in Apple iOS, which lacks protection for sensitive data. This allows attackers to obtain sensitive information from memory via a crafted app. Recommendations For...

ReadyDesk Arbitrary File Upload Vulnerability

ReadyDesk is a Web-based helpdesk software solution from ReadyDesk, Inc. An arbitrary file upload vulnerability exists in ReadyDesk version 9.1. A remote attacker can exploit this vulnerability by uploading or sending a request to a specially crafted page to execute arbitrary code...

ReadyDesk SQL Injection Vulnerability

ReadyDesk is a Web-based helpdesk software solution from ReadyDesk, Inc. A SQL injection vulnerability exists in ReadyDesk version 9.1, which can be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying database...

Multiple Apple Products WebKit Unauthorized Access Vulnerability

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

CVE-2016-3557

Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 and 9.3.5 allows remote attackers to affect confidentiality and integrity via vectors related to File Load...

Unspecified Vulnerability in Oracle Agile PLM (CNVD-2016-05336)

Oracle Agile Product Lifecycle Management PLM solutions enable organizations to manage product information, processes, and decisions across a global product network throughout the product lifecycle. A security vulnerability exists in Oracle Supply Chain Products Suite version 9.3.4, 9.3.5, Oracle...

Oracle Agile PLM Information Disclosure Vulnerability (CNVD-2016-05328)

Oracle Agile Product Lifecycle Management PLM solutions enable organizations to manage product information, processes, and decisions across a global product network throughout the product lifecycle. A security vulnerability exists in Oracle Supply Chain Products Suite version 9.3.4, 9.3.5, Oracle...

Micro Focus Rumba Stack Buffer Overflow Vulnerability

Micro Focus Rumba is a terminal emulation solution using UI technology from Micro Focus UK. The solution supports users in accessing core applications from desktop, web and mobile devices. Micro Focus Rumba 9.4 HF 13960 A stack buffer overflow vulnerability exists in COM objects in previous 9.4.x...

CVE-2016-0304

The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pathnames is used, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspecified vectors, aka SPR KLYHA7MM3J...

Unitronics VisiLogic OPLC IDE Stack Buffer Overflow Vulnerability

Unitronics VisiLogic OPLC IDE is a suite of Human Machine Interface HMI and PLC application programming environments for use in the Vision and SAMBA series of controllers from Unitronics Israel. A stack buffer overflow vulnerability exists in the Unitronics VisiLogic OPLC IDE prior to version...

HPE Network Node Manager Cross-Site Scripting Vulnerability (CNVD-2016-02909)

HP Network Node Manager i-series NNMi software delivers powerful out-of-the-box features to help your network operations team efficiently manage networks of any size. A cross-site scripting vulnerability exists in HPE Network Node Manager i NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.01, whic...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise HCM Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability in the ePerformance subcomponent of the...

CVE-2016-0590

Unspecified vulnerability in the PeopleSoft Enterprise SCM Order Management component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote attackers to affect integrity via unknown vectors...

Unitronics VisiLogic OPLC IDE Arbitrary Code Execution Vulnerability

The Unitronics VisiLogic OPLC IDE is Unitronics' suite of Human Machine Interface HMI and PLC application programming environments for the SAMBA family of controllers. A security vulnerability exists in Unitronics VisiLogic OPLC IDE version 9.8.0.0 and earlier. Due to the program failing to...