The vulnerability of the MySQL database management system allows unauthorized users, after passing authentication, to affect the accessibility of data.

The Oracle MySQL Server database management system contains a vulnerability that allows remote users who have passed authentication to influence the accessibility of data by using a subcomponent called Partition...

The vulnerability of the MySQL database management system allows a malicious actor to trigger a service failure after passing authentication.

The Oracle MySQL database management system contains a vulnerability that can be exploited by remote users who have passed authentication. This vulnerability allows these users to affect the accessibility of data by using the Data Manipulation Language subcomponent...

The vulnerability of the PostgreSQL database management system allows remote users who have passed authentication to elevate their privileges levels.

The vulnerability of the PostgreSQL database management system relates to errors that occur when calling a function written in another language, or which the user cannot call directly due to established access restrictions. Exploiting this vulnerability in functions of PostgreSQL’s procedural...

HPE Insight Control server deployment information disclosure vulnerability (CNVD-2016-03947)

HPE Insight Control server deployment is a set of server management configuration tools from Hewlett Packard Enterprise HPE. An information disclosure vulnerability exists in HPE Insight Control server deployment, which could allow an authenticated remote user to obtain sensitive information or...

WordPress Cross-Site Scripting Vulnerability (CNVD-2016-03651)

WordPress is a blogging platform developed using the PHP language that allows users to set up their weblogs on servers that support PHP and MySQL databases. A cross-site scripting vulnerability exists in WordPress versions prior to 4.3.1 that allows remote, authenticated users to inject arbitrary...

WordPress SP Projects and Document Manager Plugin SQL Injection

An SQL injection vulnerability exists in the WordPress SP Projects and Document Manager Plugin. It allows an authenticated remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data...

HPE Network Node Manager Denial of Service Vulnerability

HP Network Node Manager i-series NNMi software delivers powerful out-of-the-box features to help your network operations team efficiently manage networks of any size. A security vulnerability exists in HPE Network Node Manager i NNMi versions 9.20, 9.23, 9.24, 9.25, 10.00, 10.01 that could allow ...

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer...

CVE-2016-2301

SQL injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Cisco Unified Communications Domain Manager Cross-Site Scripting Vulnerability (CNVD-2016-01927)

Cisco Unified Communications Manager is an enterprise-class IP telephony call processing system. Cisco Unified Communications Domain Manager CDM 8.11 suffers from a cross-site scripting vulnerability in its implementation, which can be exploited by an authenticated remote user to inject arbitrary...

Digium Asterisk Open Source Denial of Service Vulnerability (CNVD-2016-01320)

Asterisk Open Source is an open source telephone exchange PBX system software from Digium, USA. The software supports voicemail, multi-party voice conferencing, interactive voice response IVR and so on. A denial of service vulnerability exists in Digium Asterisk Open Source that allows...

Cisco StarOS Elevation of Privilege Vulnerability

Cisco StarOS on ASR 5000 is a set of operating systems from Cisco that run on 5000 series router devices. An elevation of privilege vulnerability in Cisco StarOS on Cisco ASR 5000 prior to version 19.3.M0.62771 and version 20.x prior to version 20.0.M0.62768 allows an authenticated remote user to...

NHN PlayArt LINE Denial of Service Vulnerability

NHN PlayArt LINE is a suite of live chat software from the Japanese company NHN PlayArt. A denial of service vulnerability exists in NHN PlayArt LINE version 4.3.1 and prior versions, which allows a remote, authenticated user to cause a denial of service application crash by exploiting the...

Cybozu Office Denial of Service Vulnerability (CNVD-2016-01263)

Cybozu Office is a WEB-based cross-platform office solution developed by Cybozu Japan. A denial of service vulnerability exists in Cybozu Office versions 9.9.0 through 10.3.0 that could allow an authenticated remote user to cause a denial of service via a crafted CSV file...

DEBIAN-CVE-2015-8631

Multiple memory leaks in kadmin/server/serverstubs.c in kadmind in MIT Kerberos 5 aka krb5 before 1.13.4 and 1.14.x before 1.14.1 allow remote authenticated users to cause a denial of service memory consumption via a request specifying a NULL principal name...

CVE-2016-1323

The REST interface in Cisco Spark 2015-06 allows remote authenticated users to obtain sensitive information via a request for an unspecified file, aka Bug ID CSCuv84048...

CVE-2016-0882

EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

CVE-2016-0881

EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language DQL injection attacks and obtain sensitive repository information by appending a query to a REST request...

Cisco Unified Communications Manager Information Disclosure Vulnerability (CNVD-2016-01062)

Cisco Unified Communications Manager is the call processing component of the IP Telephony solution from Cisco. An information disclosure vulnerability exists in Cisco Unified Communications Manager 11.5 0.98000.480 that could allow an authenticated, remote user to obtain sensitive database table...

openstack-swift: Client to proxy DoS through Large Objects

A memory-leak issue was found in OpenStack Object Storage swift, in the client-to-proxy connection. An OpenStack-authenticated attacker could remotely trigger this flaw to cause denial of service through excess memory consumption...