mysql: Server: DDL unspecified vulnerability (CPU Jul 2017)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoco...

Overstepped Access Vulnerability in Controller Technology's Little K Series Smart Sockets

Controller smart home through cutting-edge wireless technology to upgrade the home electrical equipment networking, so as to realize a variety of whole-house intelligent scene. The controller has a variety of smart sockets, designed in a compact form with a variety of functions, with a linkage...

CVE-2018-8403

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10...

Vulnerabilities in the Integrated Management System for Coal Mine Remote Monitoring of Sichuan Institute of Safety Science and Technology

Sichuan Coal Mine Remote Integrated Monitoring System is a comprehensive monitoring and management system that can realize remote real-time monitoring of various sensing data in coal mines through the Internet and summarize, analyze and alarm them in time. It monitors the ventilation and gas...

CVE-2018-7071

HPE has identified a remote access to sensitive information vulnerability in HPE Network Function Virtualization Director NFVD 4.2.1 prior to gui patch 3...

SQL injection vulnerability in the se***.php page of the Leader Mailbox module of the SMiCMS school group system

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school group system leadership mailbox module se.php page SQL injection vulnerability. Attackers can use the vulnerability to...

ZZZCMS website builder system suffers from overstepping access vulnerability

zzcms is asp language to do free open-source station-building system, mainly facing the majority of webmasters to use. ZZZCMS website builder system exists overstepping the right to access the vulnerability, the attacker can use the vulnerability overstepping the right to access sensitive files...

CVE-2018-3052

Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications subcomponent: Internal Operations. Supported versions that are affected are 10.8.x and 11.4.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS...

CVE-2018-2888

Vulnerability in the MICROS Retail-J component of Oracle Retail Applications subcomponent: Back Office. Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Difficult to exploit vulnerability allows physical access to compromise MICROS Retail-J...

CVE-2018-3052

Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications subcomponent: Internal Operations. Supported versions that are affected are 10.8.x and 11.4.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise MICROS...

Unspecified Vulnerability in Oracle Fusion Middleware (CNVD-2018-19490)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. A securi...

CVE-2018-3054

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

Debian: Security Advisory (DLA-1400-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google WebRTC VP9 Out-of-Bounds Memory Access Vulnerability

WebRTC, whose name derives from the acronym Web Real-Time Communication, is a technology that supports real-time voice or video conversations in web browsers. A security vulnerability exists in Google WebRTC VP9. An attacker can exploit the vulnerability to cause Chrome to crash. The vulnerabilit...

Unspecified Vulnerability in Telesquare SDT-CS3B1 and SDT-CW3B1

Telesquare SDT-CS3B1 and SDT-CW3B1 are both wireless router products from Telesquare Korea. A security vulnerability exists in the Telesquare SDT-CS3B1 and SDT-CW3B1, which originates from a program with a default factory account. A remote attacker can exploit the vulnerability to gain access to...

Design/Logic Flaw

A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems...

CVE-2018-12564

CVE-2018-12564 affects LAVA (lava-server) where support for URLs in the submit page can be abused to force lava-server-gunicorn to read arbitrary server files readable by lavaserver and containing valid YAML. Impact per the sources is information disclosure (no explicit compromise of integrity/av...

Security Bulletin: Mozilla firefox vulnerability issues on IBM Storwize V7000 Unified system (CVE-2013-5609, CVE-2013-5610, CVE-2013-5611, CVE-2013-5612, CVE-2013-5613, CVE-2013-5614, CVE-2013-5615, CVE-2013-5616, CVE-2013-5618, CVE-2013-5619, CVE-2013-6

Summary IBM Storwize V7000 Unified system is shipped with Mozilla firefox, for which fixes are available for security vulnerabilities. Vulnerability Details CVEID: CVE-2013-5609 CVE-2013-5610 CVE-2013-5611 CVE-2013-5612 CVE-2013-5613 CVE-2013-5614 CVE-2013-5615 CVE-2013-5616 CVE-2013-5618...

Security Bulletin: IBM Maximo Asset Management could allow an authenticated user to view work logs during purchase orders that they should not have access to (CVE-2016-0222)

Summary IBM Maximo Asset Management could allow an authenticated user to view work logs during purchase orders that they should not have access to. Vulnerability Details CVEID: CVE-2016-0222 DESCRIPTION: IBM Maximo Asset Management could allow an authenticated user to view work logs during purcha...

Security Bulletin: IBM Maximo Asset Management could allow an authenticated user to change or view information that the user should not have access to due to issues with the Scheduler functionality (CVE-2015-7396)

Summary IBM Maximo Asset Management could allow an authenticated user to change or view information that the user should not have access to due to issues with the Scheduler functionality. This vulnerability could allow a local attacker to compromise data integrity and confidentiality. The...