ManageEngine Password Manager Pro SQLi Vulnerability (Jul 2015)

ManageEngine Password Manager Pro is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

IBM WebSphere Message Broker Toolkit and IBM Integration Toolkit Information Disclosure Vulnerability

IBM WebSphere Message Broker Toolkit and Integration Toolkit are both products of the American company IBM. The former is an enterprise service bus ESB product display graphical interface. The latter is an integrated development environment and graphical user interface based on the Eclipse...

SQL Injection Vulnerability in indexNum Parameter of E-procurement System of Yizaitong

Yicai Tong has been committed to enterprise procurement informationization and procurement consulting, providing in-depth solutions in the direction of procurement management, group intensive procurement management, lean supply chain, strategic procurement, project supply chain, and industrialize...

Sensio Labs Symfony FragmentListener ESI Security Bypass Vulnerability

Sensio Labs Symfony is a free French Sensio Labs company , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . A security bypass vulnerability exists in Sensio...

Cisco Finesse Remote Denial of Service Vulnerability

Cisco Finesse is a set of call center management software from Cisco USA. The software improves the customer experience and increases customer service representative satisfaction. A remote denial of service vulnerability exists in Cisco Finesse, which arises from the program's failure to properly...

SQL injection vulnerability in the id parameter in Ticketmaster ERP web-based ticketing system/Parmset/sms_mb_edit.aspx?id=.

Ltd. Ticketmaster ERP management system is a special ticket management system for air ticket agents, integrating online booking management, telephone recording screen, corporate travel management, order management in the same industry, membership management, points management, SMS sending, staff...

Wordpess Simple Photo Gallery Blind SQLi Vulnerability

WordPress Simple Photo Gallery is prone to blind SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Six Apart Movable Type SQLi Vulnerability (Dec 2014)

Six Apart Movable Type is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

osCMax e-commerce/shopping-cart Multiple Vulnerabilities

osCMax is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oscmax:oscmax"; ifdescription...

IBM Tivoli Endpoint Manager for Lifecycle Management Endpoint Manager for Remote Control Sensitive Information Disclosure Vulnerability

IBM Tivoli Endpoint Manager for Lifecycle Management is a suite of endpoint control software.Remote Control is a remote control component. The Endpoint Manager for Remote Control component of IBM Tivoli Endpoint Manager for Lifecycle Management IF6 does not set a security flag for cookies in http...

WordPress CartPress Plugin Zero Day Disclosure

Another round of WordPress vulnerability disclosures has taken place with details made public on a handful of unpatched bugs in the CartPress ecommerce plugin. These disclosures come on the heels of a separate disclosure of a zero-day in the WordPress core engine. Those vulnerabilities have since...

Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities of the dbus-1-debugsource package in the SUSE Linux Enterprise operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by malicious individuals who have completed the...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The kernel-image-2.2.20-idepci package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality of protected information

The Linux-headers-2.6.18-4-parisc package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the confidentiality of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the SUSE Linux Enterprise operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Mesa-32-bit operating system SUSE Linux Enterprise can lead to breaches of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the libgd1-noxpm package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the openssl-0.9.7a package of the Red Hat Enterprise Linux operating system can lead to violations of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information

The vulnerability of the haproxy-1.5.2 package for the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...

Vulnerabilities in the operating system openSUSE, which allow a malicious individual to compromise the accessibility of protected information

The multiple vulnerabilities in the kernel-iseries64 package of the OpenSUSE operating system can lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information

The vulnerability of the avahi-compat-libdnssd-devel-0.6.16 package on the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...