Pivotal Spring Data JPA SQL Injection Vulnerability

Pivotal is a new company formed by EMC and VMware. A SQL injection vulnerability exists in Pivotal Spring Data JPA due to the program's inability to adequately clean user input data. An attacker could exploit the vulnerability to access and modify data...

PHPCMS V9 role.php file SQL injection vulnerability

PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in the PHPCMS V9 role.php file, which allows attackers to exploit the vulnerability to obtai...

ImageMagick bmp.c Buffer Overflow Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. ImageMagick in the processing of other formats of image files into bmp when the conversion of buffer overflow...

Arbitrary File Deletion Vulnerability in the fileservice/FileManage.asmx?op Page of the Elearning Management System of Xinwei Software

E-learning management system is an online learning platform of Shenzhen Xinwei Software Co. The E-learning management system fileservice/FileManage.asmx?op page contains an arbitrary file deletion vulnerability that can be exploited by an attacker to delete files and folders...

Asterisk and Asterisk RTP Denial of Service Vulnerabilities

Asterisk is a free software, open source software that implements the functionality of a telephone user switch PBX. Asterisk and Asterisk RTP are vulnerable to a denial of service vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2016-07547)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. An elevation of privilege vulnerability exists in Google Android Mediaserver, which can be exploited by an attacker to gain elevated privileges...

PHP 'php_quot_print_encode()' function integer overflow vulnerability

PHP is an open source general-purpose computer scripting language. An integer overflow vulnerability in the PHP 'phpquotprintencode' function allows an attacker to exploit the vulnerability to execute arbitrary code in the context of a user's affected application, or a failed attack will result i...

Foxit Reader and Foxit PhantomPDF Out-of-Bounds Reading Information Disclosure Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation produced a small PDF document viewing and printing program, PhantomPDF is a commercial version. Foxit Reader and Foxit PhantomPDF have an out-of-bounds read information disclosure vulnerability that could be exploited by attackers to obtain...

Weak Password Vulnerability in Tiandiweiye Digital Technology Easy7 Video Surveillance Platform

TDWI Easy7 video surveillance platform is a professional security management software for centralized cross-regional network video surveillance. A generic weak password vulnerability exists in Easy7 video surveillance platform. An attacker can exploit the vulnerability to log into the video...

SQL Injection Vulnerability in zzcms Latest Product Version /zs/search.php Page

ZZCMS highlights the investment and supply and demand functions, you can quickly build a product investment website. zzcms latest product version /zs/search.php page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database data...

Perixx PERIDUO-710W Security Bypass Vulnerability

The Perixx PERIDUO-710W is a wireless desktop kit that includes a mouse and keyboard from Perixx Germany. A security bypass vulnerability exists in Perixx PERIDUO-710W. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations...

NSD Denial of Service Vulnerability

NSD is a high-performance open source name server. NSD suffers from a denial of service vulnerability. Because the NSD server fails to limit the size of the data transferred in the region, allowing a remote attacker can exploit the vulnerability to submit a special request for a denial-of-service...

libical heap out-of-bounds read vulnerability (CNVD-2016-04383)

libical is a set of open source for the implementation of iCalendar Calendar Data Exchange Standard protocols and protocol data units . A security vulnerability exists in libical. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

Patron Info System SQL Injection Vulnerability

Patron Info System is a customer information system. Patron Info System has a remote sql injection vulnerability that allows remote attackers to execute malicious sql commands to connect to dbms...

Through the NVD vulnerability database to see recent vulnerability trends-vulnerability warning-the black bar safety net

2 0 1 6 years has been in the past less than half it's time over the past few years, the vulnerability analysis. The present article will be on the NVD vulnerability database over the last 5 years vulnerability analysis, look at the vulnerability of the development trend is like. Why the choice o...

Multiple Lenovo LenovoEMC Devices Information Disclosure Vulnerability

Lenovo LenovoEMC EZ Media and Backup hm3 and others are firmware developed by the Chinese company Lenovo Lenovo for use in network storage devices. A security vulnerability exists in the management interface of several Lenovo LenovoEMC devices, which can be exploited by remote attackers to obtain...

Linux kernel denial of service vulnerability (CNVD-2016-00855)

Linux kernel is an open source operating system. Linux kernel has a security vulnerability that allows attackers to conduct denial of service attacks...

Windows-Exploit-Suggester - Tool To Compares A Targets Patch Levels Against The Microsoft Vulnerability Database

This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. It requires the 'systeminfo' comman...

Adobe Reader and Acrobat Memory Misreference Vulnerability (CNVD-2016-00269)

Adobe Reader is a PDF document reading software. Acrobat is a PDF document editing software. Adobe Reader and Acrobat processing PDF documents exist after the use of the use of vulnerabilities, allowing remote attackers to exploit the vulnerability to build malicious PDF files, inducing the user ...

Xen Denial of Service Vulnerability (CNVD-2015-08418)

Xen is an open source virtual machine monitor product. Xen has a security vulnerability that allows local attackers to exploit the vulnerability for denial of service...