IBM Rational Quality Manager Elevation of Privilege Vulnerability

IBM Rational Quality Manager RQM is a collaborative, Web-based quality management solution from IBM. The program provides test planning and test evaluation management methods within the entire software development lifecycle, and the ability to share information, automation to accelerate the proje...

CVE-2018-8928

Cross-site scripting XSS vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the 1 familyname, 2 givenname, or 3 additionalname parameter...

CVE-2017-1651

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

Ivanti Avalanche Information Disclosure Vulnerability

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions 5.3 and 6.2. The vulnerability can be exploited by a...

Fortinet FortiOS Information Disclosure Vulnerability (CNVD-2018-13969)

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. An information...

mao10cms Cross-site Script Injection Vulnerability

mao10cms is an open source content management system CMS developed using the PHP language. A cross-site scripting vulnerability exists in mao10cms version 6. Attackers can use the article page to inject arbitrary Web script or HTML...

mao10cms cross-site scripting vulnerability

mao10cms is an open source content management system CMS developed using the PHP language. A cross-site scripting vulnerability exists in version 6 of mao10cms. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of 'm=bbs&a=index' page...

CVE-2018-12696

mao10cms 6 allows XSS via the article page...

FastStone Image Viewer Denial of Service Vulnerability (CNVD-2018-14266)

FastStone Image Viewer is an image viewer that supports image browsing, format conversion, editing and more. A security vulnerability exists in FastStone Image Viewer version 6.2, which originates from the FSViewer.exe program failing to properly handle malformed JPEG files. An attacker can explo...

Mongoose Denial of Service Vulnerability

Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. A security vulnerability exists in the 'mghandlecgi' function of the mongoose.c file in Cesanta Mongoose version 6.11. A...

AKCMS Cross-Site Request Forgery Vulnerability

AKCMS is a lightweight content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in AKCMS version 6.1. A remote attacker can exploit the vulnerability to delete articles...

FTPShell Server Denial of Service Vulnerability

FTPShell Server is a safe and reliable FTP client tool. A security vulnerability exists in FTPShell Client version 6.80. An attacker can exploit this vulnerability to launch a denial of service attack...

OTRS Information Disclosure Vulnerability

OTRS Open-source Ticket Request System is a set of open source defect tracking and management system software from OTRS Group in Germany. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and th...

Arbitrary File Deletion Vulnerability in SeaCMS Version v6.6.1

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. An arbitrary file deletion vulnerability exists in SeaCMS version v6.6.1, which can be exploited by an attacker to arbitrarily delete files...

Denial of Service Vulnerability in KingView Version 6.55

KingView is the first industrial configuration software product launched by Beijing Asian Control Technology Company in China. A denial-of-service vulnerability exists in KingView 6.55, a remote attacker can cause the TouchView program to crash and exit by sending malformed packets to this port...

Arbitrary File Read Vulnerability in MetInfo v6.0

MetInfo is a Content Management System CMS developed using PHP and Mysql. An arbitrary file read vulnerability exists in MetInfo v6.0. An attacker can exploit the vulnerability to read sensitive files on a website...

IBM Jazz Reporting Service Cross-Site Scripting Vulnerability (CNVD-2018-08562)

IBM Jazz Reporting Service JRS is a suite of IBM USA applications for discovering cross-project reports that can be used in integration with IBM Rational CLM's Rational solution for managing all lifecycles of a development project. CLM users can access reports provided by JRS in dashboards,...

CVE-2018-2848

Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications subcomponent: Client Application Loader. Supported versions that are affected are 1.6 and 1.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP ...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2018-08551)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

MetInfo cross-site scripting vulnerability (CNVD-2018-08418)

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site scripting vulnerability exists in the front page of MetInfo version 6.0. A remote attacker can exploit this vulnerability by sending a feedback message to an administrat...