585 matches found
DEBIAN-CVE-2017-14721
Before version 4.8.2, WordPress allowed Cross-Site scripting in the plugin editor via a crafted plugin name...
NetMechanica NetDecision Winring0x32.sys Driver Elevation of Privilege Vulnerability
NetMechanica NetDecision is a suite of network device monitoring software.Winring0x32.sys driver is one of the drivers. A security vulnerability exists in the Winring0x32.sys driver in NetMechanica NetDecision version 5.8.2. A local attacker can exploit this vulnerability to gain privileges with...
Unspecified vulnerability in CrushFTP (CNVD-2017-30771)
CrushFTP is a cross-platform Java FTP server from the U.S. CrushFTP company . A security vulnerability exists in version 8.x prior to CrushFTP 8.2.0. No detailed vulnerability details are provided at this time...
Unspecified Vulnerability in CrushFTP
CrushFTP is a cross-platform Java FTP server from the U.S. CrushFTP company . A security vulnerability exists in CrushFTP versions prior to 7.8.0 and 8.x versions prior to 8.2.0. No detailed vulnerability details are provided at this time...
CVE-2017-14037
CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability...
NetApp Data ONTAP Denial of Service Vulnerability (CNVD-2017-30013)
NetApp Data ONTAP is a set of storage operating system from American NetApp. The system supports the enhancement of the user's enterprise application performance and improve the flexibility of the data center and so on. A security vulnerability exists in NetApp Data ONTAP versions prior to 8.2.5....
CVE-2016-9219
A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller WLC Software could allow an unauthenticated, remote attacker to cause an unexpected reload of the device. The vulnerability is due to incomplete IPv6 UDP header validation. An attacker could exploit this...
Drupal Arbitrary Code Execution Vulnerability (CNVD-2017-03745)
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A remote code execution vulnerability exists in versions of Drupal prior to 8.2.2. A remote attacker can exploit this vulnerability to execute code...
CVE-2016-0246
Cross-site scripting XSS vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2016-0249
SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2016-7214 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.8.2 Description: The issue concerns the filesystem implementation in the Linux kernel, which preserves the setgid bit during a setxattr call. This allows local users to gain group privileges by leveraging the...
Linux kernel local denial of service vulnerability (CNVD-2016-09457)
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A denial of service vulnerability exists in the 'prockeysshow' function in the security/keys/proc.c file in Linux kernel versions 4.8.2 and earlier, which stems from a program...
CVE-2016-3064
NetApp Clustered Data ONTAP before 8.2.4P4 and 8.3.x before 8.3.2P2 allows remote authenticated users to obtain sensitive cluster and tenant information via unspecified vectors...
CVE-2016-4792
Pulse Connect Secure PCS 8.2 before 8.2r1 allows remote attackers to disclose sign in pages via unspecified vectors...
PT-2016-6145 · Pulse · Pulse Connect Secure
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure PCS versions 7.4 through 7.4r13.3 Pulse Connect Secure PCS versions 8.0 through 8.0r8 Pulse Connect Secure PCS versions 8.1 through 8.1r1 Pulse Connect Secure PCS versions 8.2 through 8.2r0 Description: The administrative...
PT-2016-6143 · Pulse · Pulse Connect Secure
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure PCS versions 7.4 through 7.4r13.3 Pulse Connect Secure PCS versions 8.0 through 8.0r8 Pulse Connect Secure PCS versions 8.1 through 8.1r1 Pulse Connect Secure PCS versions 8.2 through 8.2r0 Description: A cross-site...
PT-2016-6142 · Pulse · Pulse Connect Secure
Name of the Vulnerable Software and Affected Versions: Pulse Connect Secure PCS versions 7.4 through 7.4r13.3 Pulse Connect Secure PCS versions 8.0 through 8.0r9 Pulse Connect Secure PCS versions 8.1 through 8.1r1 Pulse Connect Secure PCS versions 8.2 through 8.2r0 Description: The issue allows...
EMC Unisphere for VMAX vApp Manager Arbitrary File Write Vulnerability
EMC Unisphere for VMAX is a set of management interfaces for the VMAX storage family from EMC Corporation USA. An arbitrary file write vulnerability exists in the HTTP servlet in vApp Manager in EMC Unisphere for VMAX versions prior to 8.2.0, which can be exploited by a remote attacker to write...
Dell OpenManage Server Administrator Directory Traversal Vulnerability
Dell OpenManage Server Administrator OMSA is a set of system management solutions from Dell Dell. A directory traversal vulnerability exists in Dell OMSA version 8.2, which can be exploited by a remote attacker to read arbitrary files with the help of ... \ string to read arbitrary files...