Apache Batik Information Disclosure Vulnerability (CNVD-2018-10557)

Apache Batik also known as Batik SVG Toolkit or Batik Java SVG Toolkit is the U.S. Apache Apache Software Foundation's set of Java-based application programs mainly used to deal with SVG format images. An information disclosure vulnerability exists in Apache Batik versions 1.x prior to 1.10. An...

Citrix XenMobile Server Sensitive Data Disclosure Vulnerability

Citrix XenMobile Server is a mobility management solution from Citrix Systems. The solution is capable of managing mobile devices, developing mobile policies and compliance rules, and providing insight into the operation of mobile mobile networks. A security vulnerability exists in Citrix XenMobi...

CVE-2018-10653

There is an XML External Entity XXE Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3...

CVE-2018-10649

There is a Cross-Site Scripting Vulnerability in Citrix XenMobile Server 10.7 before RP3...

SAP Disclosure Management Unauthorized Access Vulnerability

SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A security vulnerability exists in SAP Disclosure Management version 10.1. An attacker...

SAP Disclosure Management Elevation of Privilege Vulnerability

SAP Disclosure Management is an automated financial disclosure management system from SAP. The system provides a collaborative financial disclosure process across teams, geographies, systems and data sources. A security vulnerability exists in SAP Disclosure Management version 10.1, which stems...

Gitlab system_hook_push Remote Code Execution Vulnerability

GitLab is a set of open source applications developed using Ruby on Rails to implement a self-hosted Git version control system project repository, which has similar functionality to Github, with access to a project's file contents, commit history, bug lists, etc. The GitLab Community Edition CE ...

Gitlab Projects::BoardsController component authorization bypass vulnerability

GitLab is a set of open source applications developed using Ruby on Rails , you can implement a self-hosted Git version control system project repository , it has similar features to Github , you can access the project's file content , commit history , bug lists , etc. Gitlab Enterprise Edition E...

CVE-2018-6843

Kentico 10 before 10.0.50 and 11 before 11.0.3 has SQL injection in the administration interface...

CVE-2018-6490

Denial of Service vulnerability in Micro Focus Operations Orchestration Software, version 10.x. This vulnerability could be remotely exploited to allow Denial of Service...

CVE-2017-5811

A remote code execution vulnerability in HPE Network Automation version 9.1x, 9.2x, 10.0x, 10.1x and 10.2x were found...

PostgreSQL Memory Disclosure Vulnerability

PostgreSQL is a free object-relational database management system developed by the PostgreSQL development group. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A security vulnerability exists in table partitioning ...

SUSE-SU-2018:0384-1 Security update for mariadb

This update for mariadb to version 10.0.33 fixes several issues. These security issues were fixed: - CVE-2017-10378: Vulnerability in subcomponent: Server: Optimizer. Easily exploitable vulnerability allowed low privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2017-2742

A potential security vulnerability has been identified with HP Web Jetadmin before 10.4 SR2. This vulnerability could potentially be exploited to create a denial of service...

Apple macOS High Sierra IOKit component input validation vulnerability (CNVD-2018-00184)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.IOKit is one of the components that reads system information. An input validation vulnerability exists in the IOKit component in Apple macOS High Sierra versions prior to 10.13.2. An attacker can exploi...

Claymore Dual GPU miner buffer overflow vulnerability

Claymore Dual GPU miner is a GPU monitoring software for mining virtual currency computing. A buffer overflow vulnerability exists in the remote management interface's request handler in Claymore Dual GPU miner version 10.1. The vulnerability can be exploited by a remote attacker to execute...

Mobatek MobaXterm TELNET Service Arbitrary Command Execution Vulnerability

Mobatek MobaXterm is a terminal software package developed by the French company Mobatek that integrates an enhanced terminal, an X server, and a Unix command set GNU/Cygwin.TELNET service is one of the remote communication services. A security vulnerability in the TELNET service in Mobatek...

CVE-2017-10846

Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors...

NTT DOCOMO Wi-Fi STATION L-02F Software Access Privilege Vulnerability

NTT DOCOMO Wi-Fi STATION L-02F Software is a set of software used in routers from NTT DOCOMO Japan. A security vulnerability exists in NTT DOCOMO Wi-Fi STATION L-02F Software V10b and earlier versions. A remote attacker could exploit the vulnerability to bypass access restrictions and obtain devi...

IBM DB2 Denial of Service Vulnerability (CNVD-2017-33609)

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBM i, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM DB2 versions 10.5 and 11.1. A remote attacker could...