Cross site scripting

A reflected Cross-site scripting XSS vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 allows remote attackers to inject arbitrary web script or HTML via the /deleteMO.do method parameter...

Sql injection

A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /editDisplaynames.do?method=editDisplaynames GET request...

CVE-2018-15168

A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids parameter in a /editDisplaynames.do?method=editDisplaynames GET request...

Zoho ManageEngine Applications Manager Cross-Site Scripting Vulnerability (CNVD-2019-30263)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A cross-site scripting...

CVE-2018-15169

The CVE-2018-15169 entry concerns Zoho ManageEngine Applications Manager 13 before build 13820, where a reflected XSS vulnerability exists in the /deleteMO.do parameter. The issue allows remote attackers to inject arbitrary web script or HTML. Documented impacts include the ability to perform scr...

CVE-2018-15168

CVE-2018-15168 involves a SQL injection in Zoho ManageEngine Applications Manager 13 prior to build 13820, exploitable via the resids parameter in a GET request to /editDisplaynames.do?method=editDisplaynames. The issue is documented in multiple sources (NVD entry and CVE lists) with the affected...

Cross-site Scripting (XSS)

react-dom is vulnerable to cross-site scripting XSS attacks. The library does not properly sanitize the attribute name in server applications, allowing a malicious user to inject and execute arbitrary Javascript. This does not affect client-rendered applications...

UBUNTU-CVE-2018-4270

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 11.4.1, tvOS 11.4.1, watchOS 4.3.2, Safari 11.1.2, iTunes 12.8 for Windows, iCloud for Windows 7.6...

Symfony Flaw Leaves Drupal Sites Vulnerable to Hackers—Patch Now

It's time to update your Drupal websites. Drupal, the popular open-source content management system, has released a new version of its software to patch a security bypass vulnerability that could allow a remote attacker to take control of the affected websites. The vulnerability, tracked as...

Unspecified Vulnerability in Oracle Retail Applications MICROS Relate CRM Software Component

Oracle Retail Applications is a set of retail applications store solutions from Oracle Corporation. MICROS Relate CRM Software is one of the customer relationship management components. An unspecified vulnerability exists in the Oracle Retail Applications MICROS Relate CRM Software component. An...

Oracle Retail Applications Retail Customer Management and Segmentation Foundation Component Access Control Error Vulnerability

Oracle Retail Applications is a set of retail application store solutions from Oracle Corporation. Retail Customer Management and Segmentation Foundation is one of the retail customer management components. An access control error vulnerability exists in the Oracle Retail Applications Retail...

Oracle Hospitality Applications Hospitality Cruise Fleet Management System Component Access Control Error Vulnerability (CNVD-2019-39927)

Oracle Hospitality Applications is a suite of business applications, servers and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, provides tracking and management of customer services throughout the journey to improve...

Oracle Hospitality Applications Hospitality Cruise Shipboard Property Management System Component Access Control Error Vulnerability

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Oracle Hospitality Applications Hospitality Cruise Shipboard Property Management System Component Access Control Error Vulnerability (CNVD-2019-39930)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

Qualys Helps Smaller Organizations Secure Hybrid IT with Free Offering

The digital transformation revolution waits for -- and spares -- no one. It forces all businesses to adopt tech innovations, like cloud, IoT and mobility, and to protect the resulting IT environments as they become hybrid, distributed and elastic. With traditional network perimeters dissolved,...

WebRTC - H264 NAL Packet Processing Type Confusion

Type confusion can occur when processing a H264 packet. In the method PacketBuffer::FindFrames in modules/videocoding/packetbuffer.cc there is a loop on line 296 that goes through the databuffer vector backwards. The flag ish264 is set before this loop, and if it is true, the loop extracts and se...

Important: Red Hat Security Advisory: openslp security update

An update for openslp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2018-7947

Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153C00 have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific...

CVE-2018-7947

Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153C00 have an authentication bypass vulnerability. An attacker could trick the user to connect to a malicious device. In the debug mode, the malicious software in the device may exploit the vulnerability to bypass some specific...

CVE-2018-7947

CVE-2018-7947 affects Huawei mobile phones running Emily-AL00A prior to 8.1.0.153(C00). The vulnerability is an authentication bypass that can be triggered when a user is enticed to connect to a malicious device. In debug mode, malware on the device may bypass a specific function, potentially lea...