Security Bulletin: Multiple security vulnerabilities in Tivoli Storage Manager (IBM Spectrum Protect) Operations Center (CVE-2016-6043, CVE-2016-6044, CVE-2016-6045, CVE-2106-6046)

Summary Multiple security vulnerabilities exist in Tivoli Storage Manager IBM Spectrum Protect Operations Center as described under Vulnerability Details. Vulnerability Details CVEID: CVE-2016-6043 DESCRIPTION: Tivoli Storage Manager Operations Center could allow a local user to take over a...

Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect IBM Security Identity Governance and Intelligence

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version1.7 that is used by Identity Governance and Intelligence. Vulnerability Details CVEID: CVE-2016-5597 DESCRIPTION: An unspecified vulnerability in Oracle Java SE and Java SE Embedded related to the Networking...

ManageEngine Recovery Manager Plus 5.3 - Cross-Site Scripting

Exploit Title: ManageEngine Recovery Manager Plus 5.3 Build 5330 - Persistent Cross-Site Scripting Dated: 2018-03-31 Exploit Author: Ahmet GÜREL Software Link: https://www.manageengine.com/ad-recovery-manager/ Version: = 5.3 Build 5330 Platform: Java Tested on: Windows CVE: CVE-2018-9163 1. DETAI...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-08426)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. An unspecified vulnerability exists in the InnoDB component of Oracle MySQL...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-08429)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. An unspecified vulnerability exists in the Server: Optimizer component of Orac...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-08400)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. An unspecified vulnerability exists in the Client programs component of Oracle...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-08383)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. An unspecified vulnerability exists in the Server : Security : Privileges...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-08384)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. An unspecified vulnerability exists in the Server: DML component of Oracle MyS...

Oracle Sun Solaris has an unspecified vulnerability (CNVD-2018-09045)

Oracle Sun Solaris is a Unix operating system originally developed by Sun Microsystems. An unspecified vulnerability exists in the RPC component of Oracle Sun Solaris. An attacker could exploit this vulnerability to affect availability...

BELL-CVE-2018-8822 CVE-2018-8822 does not affect BellSoft software

Bulletin has no description...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-02165)

Oracle MySQL is a small relational database management system. An unspecified vulnerability exists in the Server : Partition component of Oracle MySQL Server. An attacker could exploit this vulnerability to affect integrity and availability...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-02159)

Oracle MySQL is a small relational database management system. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server. An attacker could exploit this vulnerability to affect availability...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-02166)

Oracle MySQL is a small relational database management system. An unspecified vulnerability exists in the Server : Security : Privileges component of Oracle MySQL Server. An attacker could exploit this vulnerability to affect availability...

BELL-CVE-2017-16830 CVE-2017-16830 does not affect BellSoft software

Bulletin has no description...

swfwmd.state.fl.us XSS vulnerability

Open Bug Bounty ID: OBB-401854 Description| Value ---|--- Affected Website:| swfwmd.state.fl.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

UBUNTU-CVE-2017-3538

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Shared Folder. Supported versions that are affected are Prior to 5.0.34 and Prior to 5.1.16. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

Authorization

Custom commands may be executed on Ambari Agent 2.4.x, before 2.4.2 hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent hosts, as the user executing the Ambari Agen...

Unspecified vulnerability in Zimbra Collaboration (CNVD-2017-00755)

Zimbra can provide open source email server software and shared calendars. An unspecified vulnerability in Zimbra Collaboration prior to version 8.6.0 Patch 7. Allows remotely authenticated users to affect availability via unknown vectors, also known as Bug 102029...

Design/Logic Flaw

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 103959...

CVE-2016-4019

Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect integrity via unknown vectors, aka bug 104477...