IBM Rational Collaborative Lifecycle Management Cross-Site Scripting Vulnerability

IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines three products, RTC, RQM, and RRC, in a single IBM SmartCloud Enterprise cloud environment image to provide requirements management,...

IBM Sterling B2B Integrator XML External Entity Injection Vulnerability (CNVD-2019-08291)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An XML external entity injection vulnerability exists in IBM...

CVE-2018-15816

FastStone Image Viewer 6.5 has a Read Access Violation on Block Data Move starting at image00400000+0x0000000000002d7d via a crafted image file...

CVE-2019-8988

The application server component of TIBCO Software Inc.'s TIBCO Data Science for AWS, and TIBCO Spotfire Data Science contains a persistent cross-site contains a vulnerability that theoretically allows a user to escalate their privileges on the affected system, in a way that may allow for data...

ArcSight Logger Directory Traversal Vulnerability

Micro Focus ArcSight Logger is a suite of log management software from Micro Focus UK. The software collects and integrates data from any log generation source for log management, searching, indexing, reporting, analysis and retention. A path traversal vulnerability exists in Micro Focus ArcSight...

CVE-2019-3483

Mitigates a potential information leakage issue in ArcSight Logger versions prior to 6.7...

Code Execution Vulnerability in YxtCMF Online Learning System v6.1

YxtCMF online learning system is an online learning platform system developed with thinkphp+bootstrap as the framework. YxtCMF Online Learning System v6.1 has a code execution vulnerability that can be exploited by attackers to execute arbitrary code...

Joyent Node.js Denial of Service Vulnerability (CNVD-2019-42554)

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

Arbitrary file deletion vulnerability in emlog v6.0.0 backend b****.php page

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. The emlog v6.0.0 backend b.php page has an arbitrary file deletion vulnerability...

Stored Cross-Site Scripting Vulnerability in the Daimi CMS v6.0.5 da***.me***.php File

DAMI CMS is a PC building station and cell phone building station integrated all-in-one system. A stored cross-site scripting vulnerability exists in the Daimi CMS da.me.php file. An attacker can insert malicious js code into the page to obtain user cookies and other information, leading to user...

CVE-2019-4038

IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing security checks. Exploitation of this weakness can result in a limited form of code injection. IBM X-Force ID: 156162...

CVE-2018-18941

In Vignette Content Management version 6, it is possible to gain remote access to administrator privileges by discovering the admin password in the vgn/ccb/user/mgmt/user/edit/0,1628,0,00.html?uid=admin HTML source code, and then creating a privileged user account. NOTE: this product is...

1Password application for Android denial of service vulnerability

1Password application for Android is an Android-based application for storing and managing personal passwords. A denial of service vulnerability exists in version 6.8 of the 1Password application for Android-based platforms. An attacker can exploit this vulnerability to cause a 1Password instance...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2019-03530)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

CVE-2019-0002

On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might not take effect. When this issue occurs, the output of the command: show pfe filter hw summary will not show the entry for: RACL group Affected releases are...

DamiCMS Arbitrary File Read Vulnerability

DamiCMS is a content management system CMS for building websites quickly. A security vulnerability exists in DamiCMS version 6.0.1. A remote attacker can exploit the vulnerability by sending a specially crafted request admin.php?s=Tpl/Add/id to read arbitrary files...

CVE-2018-20486

MetInfo 6.x through 6.1.3 has XSS via the /admin/login/logincheck.php urlarray parameter...

Synology DiskStation Manager Improper Escape Neutralization Vulnerability

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology. The operating system manages information such as data, files, photos, music, and more. An improper escape neutralization vulnerability exists in Log Exporter in Synology DSM versions prio...

Synology DiskStation Manager Cross-Site Scripting Vulnerability (CNVD-2019-03275)

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology. The operating system manages information such as data, files, photos, music, and more. A cross-site scripting vulnerability exists in the info.cgi file in Synology DSM versions prior to...

CVE-2018-7066

An unauthenticated remote command execution exists in Aruba ClearPass Policy Manager on linked devices. The ClearPass OnConnect feature permits administrators to link other network devices into ClearPass for the purpose of collecting enhanced information about connected endpoints. A defect in the...