Code execution vulnerability in zzzcms v1.5.8 backend sa***.php file

zzcms is a free website builder developed in asp language. zzzcms v1.5.8 code execution vulnerability exists in the background sa.php file. An attacker can exploit this vulnerability to execute arbitrary code...

RHEL 7 : openshift (RHSA-2015:2544)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:2544 advisory. OpenShift Enterprise by Red Hat is the company's cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud...

zzzcms V1.5.7 php official version of the back-end code execution vulnerabilities exist

zzcms is a free and open source building system, mainly facing the majority of webmasters to use. zzzcms V1.5.7 php official version of the background sa.php file editfile function there is a code execution vulnerability, an attacker can take advantage of the vulnerability to execute arbitrary co...

PointOfSales SQL Injection Vulnerability

PointOfSales is a point of sale system. The system includes features such as inventory management, customer management and performance management. A SQL injection vulnerability exists in PointOfSales version 1.0. A remote attacker can exploit this vulnerability to view, add, modify, or delete...

BSEN Ordering software SQL Injection Vulnerability

BSEN Ordering software is a procurement management system. A SQL injection vulnerability exists in BSEN Ordering software version 1.0. A remote attacker can use the vulnerability to view, add, modify, or delete information in the back-end database with the help of the...

Curriculum Evaluation System SQL Injection Vulnerability

Curriculum Evaluation System is a curriculum evaluation system. A SQL injection vulnerability exists in Curriculum Evaluation System version 1.0. A remote attacker can use the login page to view, add, modify, or delete information in the back-end database...

Centreon SQL Injection Vulnerability

Centreon formerly known as Merethis Centreon is an open source IT monitoring software suite from Centreon France that needs to be paired with Nagios to manage Nagios via the web and third-party components to enable monitoring of networks, operating systems and applications. A SQL injection...

CVE-2018-12667

The SV3C HD Camera L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B is affected by an improper authentication vulnerability that allows requests to be made to back-end CGI scripts without a valid session. This vulnerability could be used to read and modify the...

QEMU: slirp: heap buffer overflow while reassembling fragmented datagrams

A heap buffer overflow issue was found in the way SLiRP networking back-end in QEMU processes fragmented packets. It could occur while reassembling the fragmented datagrams of an incoming packet. A privileged user/process inside guest could use this flaw to crash the QEMU process resulting in DoS...

CVE-2018-1819

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2, 3.0.4, 3.0.6, and 3.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end databas...

Sql injection

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.2, 3.0.4, 3.0.6, and 3.2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end databas...

Sql injection

IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145109...

CVE-2018-1674

IBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145109...

Sql injection

IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, information in the back-end database. IBM X-Force ID: 148599...

CVE-2018-1699

IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 145968...

RSA Archer embedded WorkPoint component SQL injection vulnerability

RSA Archer is an enterprise IT governance and compliance governance product. An SQL injection vulnerability exists in the RSA Archer embedded WorkPoint component, which can be exploited by an attacker to execute SQL commands on a back-end database to read certain data...

Hardcoded credentials

A remote attacker may be able to disrupt services on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 if the TMM virtual server is configured with a HTML or a Rewrite profile. TMM may restart while processing some specially prepared HTML content from the back end...

Security Bulletin: Multiple Security Vulnerabilities have been addressed in LMS 6.0 on Cloud

Summary Multiple Security Vulnerabilities have been addressed in LMS 6.0 on Cloud Vulnerability Details CVEID: CVE-2016-5938 DESCRIPTION: IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system. CVSS Base Score: 4 CVSS Temporal Score: See...

Security Bulletin: IBM Maximo Asset Management is vulnerable to SQL injection(CVE-2017-1175)

Summary IBM Maximo Asset Management is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Vulnerability Details CVEID: CVE-2017-1175 DESCRIPTION: IBM Maximo...

Security Bulletin: IBM Atlas eDiscovery Process Management vulnerable to SQL injection.

Summary Atlas eDiscovery Process Management has addressed vulnerablility due to SQL injection, where a remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. Vulnerability Details CVEID:...