781 matches found
IBM Security Guardium Information Disclosure Vulnerability (CNVD-2018-24842)
IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardium version 10.5...
CVE-2018-17411
An XML External Entity XXE vulnerability exists in iWay Data Quality Suite Web Console 10.6.1.ga-2016-11-20...
IBM Campaign HTML Injection Vulnerability
IBM Campaign formerly known as Unica Campaign is a management solution from IBM in the United States used to help marketers design, execute, measure, and optimize marketing advertising. An HTML injection vulnerability exists in IBM Campaign versions 9.1, 9.1.2, and 10, which can be exploited by...
Arbitrary File Deletion Vulnerability in Apple CMS v10
Apple CMS is a well-established and powerful rapid site builder running on PHP+MYSQL environment. Apple CMS v10 background there are arbitrary file deletion vulnerability, the vulnerability stems from the $name, $force parameters are not filtered, an attacker can use the vulnerability to delete...
Compatibility update for upgrading to Windows 10 Version 1709: August 14, 2018
None None...
CVE-2018-14418
In Msvod Cms v10, SQL Injection exists via an images/lists?cid= URI...
VMware Tools Out-of-Bounds Read Vulnerability
VMware Tools is a set of enhancements that come with VMware's VMWare virtual machines. It is a set of drivers provided by VMware to enhance the performance of virtual graphics cards and hard drives, as well as to synchronize the clocks of the virtual machines with those of the host computer. An...
ELO ELOenterprise and ELOprofessional Access Manager Component SQL Injection Vulnerability
ELO is ELO Digital Office's document management system. eloenterprise is its enterprise version; eloprofessional is its professional version. access manager is one of the access managers. A SQL injection vulnerability exists in the HTTP GET parameter 'ticket' of the Access Manager component in EL...
Natus Xltek NeuroWorks Buffer Overflow Vulnerability (CNVD-2018-12130)
Natus Xltek NeuroWorks is a suite of versatile software platforms for EEG testing, long-term monitoring, ICU monitoring and sleep studies from Natus Medical, USA. A buffer overflow vulnerability exists in the SavePatientMontager feature in Natus Xltek NeuroWorks version 10. A remote attacker coul...
Node.js Denial of Service Vulnerability (CNVD-2018-11810)
Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...
IBM Robotic Process Automation with Automation Anywhere Cross-Site Request Forgery Vulnerability
IBM Robotic Process Automation with Automation Anywhere is a process automation solution developed by IBM USA and Automation Anywhere. A cross-site request forgery vulnerability exists in IBM Robotic Process Automation with Automation Anywhere version 10.0. A remote attacker can exploit this...
Apache Batik Information Disclosure Vulnerability (CNVD-2018-10557)
Apache Batik also known as Batik SVG Toolkit or Batik Java SVG Toolkit is the U.S. Apache Apache Software Foundation's set of Java-based application programs mainly used to deal with SVG format images. An information disclosure vulnerability exists in Apache Batik versions 1.x prior to 1.10. An...
Citrix XenMobile Server Sensitive Data Disclosure Vulnerability
Citrix XenMobile Server is a mobility management solution from Citrix Systems. The solution is capable of managing mobile devices, developing mobile policies and compliance rules, and providing insight into the operation of mobile mobile networks. A security vulnerability exists in Citrix XenMobi...
CVE-2018-10653
There is an XML External Entity XXE Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...
CVE-2018-10649
There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3...
SAP Disclosure Management Unauthorized Access Vulnerability
SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A security vulnerability exists in SAP Disclosure Management version 10.1. An attacker...
SAP Disclosure Management Elevation of Privilege Vulnerability
SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A security vulnerability exists in SAP Disclosure Management version 10.1, which stems...
Gitlab Projects::BoardsController component authorization bypass vulnerability
GitLab is a set of open source applications developed using Ruby on Rails , you can implement a self-hosted Git version control system project repository , it has similar features to Github , you can access the project's file content , commit history , bug lists , etc. Gitlab Enterprise Edition E...
Gitlab system_hook_push Remote Code Execution Vulnerability
GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github, with access to a project's file contents, commit history, bug lists, etc. The GitLab Community Edition CE ...