2230 matches found
SQL injection vulnerability in the init function of iCMS latest version V7admincp.class.php page
iCMS is a free, clean, efficient, and useful PHP content management system. The latest version of iCMS V7admincp.class.php page init function has a SQL injection vulnerability that can be exploited by attackers to bypass the backend and directly log into the system to obtain sensitive information...
LogicalDoc Community Edition XXE Vulnerability
LogicalDoc CommunityEdition is a document management system developed using Java technology . The system has Lucene full-text search index and automatic import and other functions . An XML injection vulnerability exists in LogicalDoc CommunityEdition 7.5.3 and earlier versions. No details of the...
ImageMagick Denial of Service Vulnerability (CNVD-2017-15116)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadDPXImage' function of the coders\dpx.c file in ImageMagick versio...
SAP NetWeaver Denial of Service Vulnerability (CNVD-2017-23560)
SAP NetWeaver is a service-oriented, integrated application platform from SAP that provides a development and runtime environment for SAP applications.SAP Netweaver AS ABAP is an application server that runs in NetWeaver and is based on the ABAP high-level programming language. A security...
ImageMagick memory leak vulnerability (CNVD-2017-15114)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A memory leak vulnerability exists in the 'ReadXWDImage' function of the coders\xwd.c file in ImageMagick version...
CVE-2017-0688
A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35584425...
CVE-2017-1175
IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123297...
CVE-2017-1234
IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123913...
Easy File Sharing Web Server Authentication Bypass Vulnerability
Easy File Sharing Web Server is a file sharing WEB service program. An authentication bypass vulnerability exists in Easy File Sharing Web Server version 7.2, which allows an attacker to bypass login authentication to obtain sensitive information...
CVE-2016-9984
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote authenticated attacker to execute arbitrary commands on the system as administrator. IBM X-Force ID: 120276...
CVE-2017-2187
Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2017-15246 · WordPress · Wp Live Chat Support
Name of the Vulnerable Software and Affected Versions: WP Live Chat Support versions prior to 7.0.07 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations: For versions prior to 7.0.07, update to version 7.0.07 or later to resolv...
ImageMagick 'coders/pdb.c' Denial of Service Vulnerability
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadPDBImage' function of the coders/pdb.c file in ImageMagick versio...
ImageMagick Denial of Service Vulnerability (CNVD-2017-08551)
ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadMPCImage' function of the mpc.c file in ImageMagick version...
Cross-Site Request Forgery Vulnerability in 08CMS Real Estate System
08CMS Real Estate System is a PHP+MYSQL based, professional and secure operation solution for local real estate portals. 08cms version 7.0 real estate system has a cross-site request forgery vulnerability, which can be exploited by attackers to perform unauthorized operations...
IBM Maximo Asset Management Sensitive Information Disclosure Vulnerability
IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A sensitive...
Dell Integrated Remote Access Controller Cross-Site Scripting Vulnerability
The Dell Integrated Remote Access Controller iDRAC 7 and 8 are both remote access control cards from Dell USA. A cross-site scripting vulnerability exists in Dell iDRAC 7 and 8 versions prior to 2.21.21.21. A remote attacker could exploit this vulnerability to inject arbitrary web script or HTML...
Unspecified Vulnerability in Google Android Qualcomm Component (CNVD-2017-08209)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A security vulnerability exists in the Qualcomm component in versions of Google Android prior to...
HP Intelligent Management Center Remote Code Execution Vulnerability (CNVD-2017-06981)
HP Intelligent Management Center IMC is a suite of network intelligence management center solutions from Hewlett-Packard HP. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability exists in HP IMC...