Microsoft SQL Server Privilege Vulnerability

Microsoft SQL Server is the United States Microsoft Microsoft company develops and maintains a set of applications in the Microsoft Windows system under the large commercial database system. An elevation of privilege vulnerability exists in Microsoft SQL Server, which can be exploited by an...

Adobe Flash Player and AIR Cross-Domain Information Disclosure Vulnerability (CNVD-2015-04572)

Adobe Flash Player is an integrated multimedia player. Adobe AIR is a technology developed for the integration of web and desktop applications, allowing control of cloud-based programs on the web without having to go through a browser. Adobe Flash Player and AIR have cross-domain information...

[SECURITY] Fedora 21 Update: less-471-4.fc21

The less utility is a text file browser that resembles more, but has more capabilities. Less allows you to move backwards in the file as well as forwards. Since less doesn't have to read the entire input file before it starts, less starts up more quickly than text editors for example, vi. You...

The vulnerability of the Acrobat text viewing program allows a violator to circumvent access restrictions.

The vulnerability of the Acrobat text viewing program arises when using the JavaScript API, and it could allow a malicious actor to circumvent current access control regulations remotely...

The vulnerability of the Acrobat text viewing program allows a violator to circumvent access restrictions.

The vulnerability of the Acrobat text viewing program arises when using the JavaScript API, and it could allow a malicious actor to circumvent current access control regulations remotely...

The vulnerability of the Acrobat text viewing program allows a violator to circumvent access restrictions.

The vulnerability of the Acrobat text viewing program arises when using the JavaScript API, and it could allow a malicious actor to circumvent current access control regulations remotely...

The vulnerability of the Acrobat text viewing program allows a violator to circumvent access restrictions.

The vulnerability of the Acrobat text viewing program arises when using the JavaScript API, and it could allow a malicious actor to circumvent current access control regulations remotely...

Important: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5, 6, and 7. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

TransmitMail vulnerable to directory traversal

Overview TransmitMail is a PHP based mail form. TransmitMail contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer und...

Important: Red Hat Security Advisory: redhat-access-plugin security update

An updated redhat-access-plugin-openstack package that fixes one security issue is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring...

Red Hat redhat-access-plugin for OpenStack Dashboard Arbitrary File Read Vulnerability

Red Hat redhat-access-plugin for OpenStack Dashboard horizon is a technology preview plugin from Red Hat, Inc. that provides seamless, integrated access to Red Hat's subscription services from the Red Hat OpenStack Management Portal. A security vulnerability exists in the 'log-viewing' function i...

Path traversal

The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard horizon allows remote attackers to read arbitrary files via a crafted path...

CVE-2015-0271

The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard horizon allows remote attackers to read arbitrary files via a crafted path...

CVE-2015-0271

CVE-2015-0271 affects Red Hat OpenStack Horizon’s redhat-access-plugin (pre-6.0.3). The vulnerability arises from an unsanitized input in the log-viewing function, allowing an authenticated attacker to read arbitrary files via a crafted path. Impact is reading sensitive files with the web server’...

CVE-2015-0271

The log-viewing function in the Red Hat redhat-access-plugin before 6.0.3 for OpenStack Dashboard horizon allows remote attackers to read arbitrary files via a crafted path...

Hybris Commerce Software Suite Directory Traversal Vulnerability

Hybris Commerce Software Suite is e-commerce software and multichannel commerce solutions. A directory traversal vulnerability in Hybris Commerce Software Suite allows an attacker to submit a special request to view the contents of a file with WEB privileges...

PHPB2B某处漏洞直接查看mysql密码

简要描述： PHPB2B某处漏洞直接查看mysql密码 详细说明： PHPB2B某处漏洞直接查看mysql密码 官网下载的最新版 install/install.php 安装文件，查看下代码。 ?php / PHPB2B Copyright C 2007-2099, Ualink Inc. All Rights Reserved. The contents of this file are subject to the License; you may not use this file except in compliance with the License. @version...

LG On-Screen Phone Security Bypass Vulnerability

LG On-Screen Phone is a service program that allows you to remotely view and manipulate your cell phone through PC keyboard/mouse input. A security bypass vulnerability exists in LG On-Screen Phone, which can be exploited by attackers to bypass certain security restrictions and perform unauthoriz...

CVE-2014-4431

Dock in Apple OS X before 10.10 does not properly manage the screen-lock state, which allows physically proximate attackers to view windows by leveraging an unattended workstation...

Important: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes two security issues is now available for Red Hat Enterprise Linux 5 and 6. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...