8 matches found
NEC Platforms DT900 Series security vulnerabilities
NEC Platforms DT900 Series is a series of IP desktop phones from Japan Electric NEC. A security vulnerability exists in the NEC Platforms DT900 Series that originates from allowing access to system settings...
Vulnerabilities fixed in Oracle Virtualization
Oracle has fixed vulnerabilities in Secure Global Desktop and VirtualBox. The vulnerabilities allow a malicious party to perform attacks execute attacks that result in the following categories of damage: Server-side request forgery Denial-of-Service DoS. Manipulation of data Access to system data...
Vulnerabilities fixed in Foxit products
Vulnerabilities have been fixed in Foxit products. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS. Remote code execution User Rights Access to system data Foxit has released updates to fix the vulnerabilitie...
Vulnerabilities fixed in Cisco Data Center Network Manager
Cisco has fixed several vulnerabilities in the Data Center Network Manager. The vulnerabilities allow a local authenticated malicious party to conduct attacks that can lead to the following types of damage: Cross-Site Scripting XSS. Manipulation of data Access to system data Increased user...
PT-2018-11071
Name of the Vulnerable Software and Affected Versions Symantec Messaging Gateway versions prior to 10.6.6 Description The issue is related to an authentication bypass exploit, which can allow attackers to potentially circumvent security mechanisms and gain access to the system or network...
CVE-2015-7683: Absolute Path Traversal in the Font WordPress Plugin
Details ================ Software: Font Version: 7.5 Homepage: https://wordpress.org/plugins/font/ CVE: CVE-2015-7683 Pending CVSS: 6.3 Medium; AV:N/AC:M/Au:S/C:C/I:N/A:N CWE: CWE-22 Description ================ An absolute path traversal vulnerability in Font 7.5 allows WordPress admins read...
DB4Web 3.43.6 - File Disclosure
DB4Web 3.43.6 - File Disclosure source: https://www.securityfocus.com/bid/5723/info DB4Web is an application server that allows read and write access to relational databases and other information sources, via the web. The application is available for Windows, Linux, and various Unix platforms. A...