CVE-2017-1302

Summary (CVE-2017-1302) : IBM Sterling B2B Integrator Standard Edition (Version 5.2) could allow a local user to view sensitive information due to improper access controls . The root cause is an access control weakness that permits viewing of sensitive data locally. The IBM security bulletin note...

Siemens XHQ Elevation of Privilege Vulnerability

XHQ Production Operations Intelligence is Siemens Energy's flagship solution, widely deployed by the world's largest oil & gas and chemical companies. An elevation of privilege vulnerability exists in Siemens XHQ 4 and XHQ 5. It allows an authenticated remote user with low privileges to gain read...

CVE-2017-8449

X-Pack Security 5.2.x would allow access to more fields than the user should have seen if the field level security rules used a mix of grant and exclude rules when merging multiple rules with field level security rules for the same index...

CVE-2017-0639

An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other...

Unspecified Vulnerability in Oracle Retail Warehouse Management System

Oracle Retail Applications is the United States Oracle Oracle company's set of retail applications store solutions. Oracle Retail Warehouse Management System is one of the retail warehouse management components. A security vulnerability exists in the Security subcomponent of the Oracle Retail...

Design/Logic Flaw

Vision Critical before 2014-05-30 allows attackers to read arbitrary files via unspecified vectors, as demonstrated by image files and configuration files...

[SECURITY] [DSA 3825-1] jhead security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3825-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso March 31, 2017 https://www.debian.org/security/faq -...

Design/Logic Flaw

IBM TRIRIGA Report Manager 3.2 through 3.5 contains a vulnerability that could allow an authenticated user to execute actions that they do not have access to. IBM Reference : 1999563...

CVE-2017-0107

Microsoft SharePoint Server fails to sanitize crafted web requests, allowing remote attackers to run cross-script in local security context, aka "Microsoft SharePoint XSS Vulnerability."...

KLA11037 Arbitrary code execution vulnerability in VMware products

An out-of-bounds memory access vulnerability in the DnD drag-and-drop function was found in VMware Workstation Pro and VMware Workstation Player. By exploiting this vulnerability malicious users can execute arbitrary code on the operating system running VMware Workstation Pro or VMware Workstatio...

CVE-2017-6343

The vulnerability CVE-2017-6343 affects Dahua DHI-HCVR7216A-S3 devices and is realized via the web interface, enabling remote authentication bypass by using knowledge of the MD5 Admin Hash to gain login access without the password. Affected components include NVR firmware 3.210.0001.10, Camera fi...

Google Chrome WebRTC Out-of-Bounds Memory Access Vulnerability

Google Chrome is a popular web browser. A memory access vulnerability exists in the Google Chrome WebRTC overrun, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by the user, which can crash the application or execute...

D-Link DWR-932B Arbitrary File Read Vulnerability

The D-Link DWR-932B is a popular router device. The D-Link DWR-932B handles... A security vulnerability exists in %2f that allows remote attackers to submit a special request to read the contents of arbitrary files...

Rockwell Automation MicroLogix 1100 and 1400 Unauthorized Access Vulnerability

Rockwell Automation is a British company that provides industrial automation control and globalized information. the MicroLogix 1100 and 1400 series products are used in food, agriculture, and water and wastewater systems, among other applications. An unauthorized access vulnerability exists in...

Multiple Cisco Intercloud Fabric Security Bypass Vulnerabilities

Cisco Intercloud Fabric for Business and Intercloud Fabric for Providers are both products of the American company Cisco. The former is a service for managing hosting deployments and the latter is a virtual appliance for deploying and managing cloud providers. A security vulnerability exists in...

CVE-2016-9286

framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not properly restrict access to user records, which allows remote attackers to read address information, as demonstrated by an address/show/id/1 URI...

CVE-2016-9285

framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows remote attackers to read user information via a modified id number, as demonstrated by address/edit/id/1, related to an "addresses, countries, and regions" issue...

OPENSUSE-SU-2016:2732-1 Security update for chromium

This update to Chromium 54.0.2840.90: fixes the following security issues: - CVE-2016-5198: out of bounds memory access in v8 boo1008274...

Default Password 'anko' for 'root' Account

The account 'root' on the remote host has the default password 'anko'. A remote attacker can exploit this issue to gain administrative access to the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "anko"; include'deprecatednasllevel.inc';...

Buffer overflow

Unspecified vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component in Oracle Financial Services Applications 12.0.0 and 12.1.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...