781 matches found
CVE-2016-0254
IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service...
Halliburton LogView Pro Buffer Overflow Vulnerability
Halliburton LogView Pro is a text log viewing software. A buffer overflow vulnerability exists in Halliburton LogView Pro version 10.0.1. An attacker can exploit this vulnerability to cause a denial of service with a specially crafted .tif file...
PCRE2 Buffer Overflow Vulnerability (CNVD-2017-06216)
PCRE2 is an API for modifying PCRE Open Source Regular Expression Library developed by software developer Philip Hazel. A heap buffer overflow vulnerability exists in the pcre2test.c file in PCRE2 version 10.23. A remote attacker could exploit this vulnerability to cause a denial of service with...
IBM Cognos TM1 Denial of Service Vulnerability (CNVD-2017-06013)
IBM Cognos TM1 is a suite of enterprise planning software for planning, budgeting, forecasting and analyzing from IBM in the United States. The software quickly analyzes data, models business needs, and collaborates on plans, budgets, and forecasts. A denial of service vulnerability exists in IBM...
IBM Cognos TM1 Cross-Site Scripting Vulnerability (CNVD-2017-05100)
IBM Cognos TM1 is a suite of enterprise planning software for planning, budgeting, forecasting and analyzing from IBM in the United States. The software quickly analyzes data, models business needs, and collaborates on plans, budgets, and forecasts. A cross-site scripting vulnerability exists in...
SQL Injection Vulnerability in Love Channel Music V10.01 System logo.php Page
Love Channel Music System is an audio-visual management system developed using php+Mysql. An SQL injection vulnerability exists in the logo.php page of the Love Channel Music V10.01 system. The lack of filtering of the 'cdid' parameter allows attackers to exploit the vulnerability to obtain...
CVE-2017-1150
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not be permitted to view. IBM Reference : 1999515...
NETGEAR DGN2200 Arbitrary Command Execution Vulnerability
The NETGEAR DGN2200 is an ADSL router device. An arbitrary command execution vulnerability in ping.cgi in the NETGEAR DGN2200 version 10.0.0.50 can be exploited to execute arbitrary operating system commands via shell metacharacters in the pingIPAddr field of an HTTP POST request...
Apple Safari and iOS Safari Reader Component Cross-Site Scripting Vulnerability
Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Apple Safari is a web browser that is the default browser shipped with Mac OS X and iOS operating systems; Safari Reader is one of the browser's own Reader component. A cross-site...
Apple macOS Sierra AppleGraphicsPowerManagement Component Denial of Service Vulnerability
Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.AppleGraphicsPowerManagement is one of the graphics card power management components. A security vulnerability exists in the AppleGraphicsPowerManagement component in Apple macOS Sierra versions prior to...
CVE-2016-0246
Cross-site scripting XSS vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Oracle Sun Systems Products Suite Solaris Component Local Denial of Service Vulnerability
Oracle Solaris is a set of Unix-like operating systems from Oracle. A local denial of service vulnerability exists in the Filesystem subcomponent of the Oracle Solaris component of the Oracle Sun Systems Products Suite, versions 10 and 11.3. An attacker could exploit this vulnerability to cause a...
Microsoft Internet Explorer Remote Memory Corruption Vulnerability (CNVD-2016-09377)
Internet Explorer is a web browser from Microsoft. A remote memory corruption vulnerability exists in the Handle Memory object in Internet Explorer versions 10 and 11. This vulnerability allows attackers to corrupt memory and execute arbitrary code in the current user context...
Red Hat Ceph RGW Information Disclosure Vulnerability
Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system based on POSIX Portable Operating System Interface without a single point of failure, so that data can be fault-tolerant and seamless replication...
Apple iOS/Safari/tvOS WebKit Memory Corruption Vulnerability (CNVD-2016-08299)
Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...
Apple iOS and Safari Safari Reader Cross Site Scripting Vulnerability
Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Apple Safari is a web browser that is the default browser shipped with Mac OS X and iOS operating systems; Safari Reader is one of the browser's own Reader component. A cross-site...
Apple OS X Kernel Memory Corruption Vulnerability (CNVD-2016-08113)
Apple OS X is a specialized operating system developed by Apple for Mac computers, of which Kernel is a kernel component. A memory corruption vulnerability exists in the Kernel in Apple OS X version 10.11.6, which can be exploited by a specially crafted application to execute arbitrary code with...
AbsoluteTelnet Arbitrary Code Execution Vulnerability
AbsoluteTelnet is a terminal client program. An arbitrary code execution vulnerability in AbsoluteTelnet version 10.14 can be exploited to compromise the currently logged-in user's application by tricking the user into opening a custom library file containing malicious code using the affected...
IBM TRIRIGA Applications Privilege Vulnerability
The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...