CVE-2017-17608

Child Care Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17110

Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request...

SAP HANA Extended Application Services Security Bypass Vulnerability

SAP HANA is a high-performance real-time data analytics platform from SAP, which provides data query functions that allow users to directly query and analyze a large amount of real-time business data.Extended Application Services XS is a development environment for application servers, Web server...

Unspecified Vulnerability in Apple iOS and macOS Sierra 802.1X

Apple iOS and macOS Sierra are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS Sierra is a specialized operating system developed for Mac computers. 802.1X is one of the Client or Server-based access control and authentication protocol components. A...

MyBuilder Clone SQL Injection Vulnerability

MyBuilder Clone is an e-commerce website building system. A SQL injection vulnerability exists in MyBuilder Clone version 1.0. A remote attacker can exploit this vulnerability by sending the 'subcategory' parameter to the phpsqlsearchgenxml.php file to inject SQL commands...

E-Sic Software livre CMS 'q' Parameter SQL Injection Vulnerability

E-Sic is a Brazilian electronic system for citizen information. A SQL injection vulnerability exists in E-Sic version 1.0. A remote attacker can exploit the vulnerability by sending the 'q' parameter to the file esiclivre/restrito/inc/lkpcep.php to execute arbitrary SQL commands...

PT-2017-14114 · Abb · Abb Fox515T

Name of the Vulnerable Software and Affected Versions: ABB Fox515T version 1.0 Description: The embedded web server is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use as a template. The filename is not validated, allowing an attacker to...

Zyxel NBG6716 ozkerz component command injection vulnerability

The Zyxel NBG6716 is a wireless router product from Hopkin ZyXEL Technologies. ozkerz component is one of the components. A security vulnerability exists in the ozkerz component of the Zyxel NBG6716 V1.00AAKG.9C0 version, which originates from the program's direct use of beginIndex and endIndex i...

CVE-2017-1000074

Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the stringrepeat function...

SQL Injection Vulnerability in CWCMS v1.0

CWCMS is an enterprise website management system. A SQL injection vulnerability exists in version 1.0 of the CwCMS-PHP Enterprise Website Management System. It allows attackers to exploit the vulnerability to gain access to sensitive database information...

My Click Counter Authentication Bypass Vulnerability

My Click Counter is a PHP-based click counter that can also be used as a download counter. An authentication bypass vulnerability exists in the administrator login page of My Click Counter version 1.0, which can be exploited by attackers to gain administrator privileges...

SQL injection vulnerability in type_id parameter of php+sqlite responsive article management system version v1.0

php+sqlite responsive article management system is a mobile article management system developed in php. php+sqlite responsive article management system v1.0 version typeid parameter SQL injection vulnerability , because the program fails to effectively filter the typeid parameter , allowing...

File Upload Vulnerability in Jtbccms V1.0

Jtbccms is a website system that can expand and clone existing modules. A file upload vulnerability exists in version 1.0 of jtbccms. Due to the background file management office did not verify the uploaded files, resulting in the upload of arbitrary files, serious server privileges can be obtain...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2016-10572)

Freefloat FTP Server is a free software package for uploading files and managing wired and wireless devices from the Swedish company Freefloat. A buffer overflow vulnerability exists in version 1.0 of FreeFloat FTP Server. A remote attacker can exploit this vulnerability to execute arbitrary code...

Wordpress simple-image-manipulator plugin remote file download vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. simple-image-manipulator is one of the image manipulator plugin. A remote file download vulnerability exists in Wordpress simple-image-manipulator plugin v1.0, which can be exploited by...

CVE-2016-1000138

Reflected XSS in wordpress plugin indexisto v1.0.5...

CVE-2016-1000130

Reflected XSS in wordpress plugin e-search v1.0...

iSQL isql_main.c Buffer Overflow Vulnerability

iSQL is an interpreter of SQL that interprets and executes SQL commands to create small databases. A buffer overflow vulnerability exists in iSQL version 1.0, which can be exploited by an attacker to execute arbitrary code...

Cisco Application Policy Infrastructure Controller Enterprise Module Remote Code Execution Vulnerability

Cisco Application Policy Infrastructure Controller Enterprise Module APIC-EM is a suite of Cisco applications that provide policy-based automated configuration of end-to-end infrastructure controllers. A remote code execution vulnerability exists in Cisco APIC-EM version 1.0. An attacker could...

NTT Photopt App Man-in-the-Middle Attack Vulnerability

NTT Photopt App is a suite of applications for managing photos from the NTT Nippon Telegraph and Telephone Corporation group in Japan. A security vulnerability exists in NTT Photopt App version 1.0.0 and 1.1.0, which can be exploited by attackers to conduct man-in-the-middle attacks and listen to...