Trend Micro OfficeScan Unauthorized Change Prevention Bypass Vulnerability

Trend Micro OfficeScan is a suite of distributed anti-virus software from Trend Micro. A security vulnerability exists in Trend Micro OfficeScan version 11.0 SP1 and XG. An attacker with administrator privileges could exploit this vulnerability to bypass security protections that prevent...

CVE-2018-6491

Local Escalation of Privilege vulnerability to Micro Focus Universal CMDB, versions 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, 10.33, 11.00. The vulnerability could be remotely exploited to Local Escalation of Privilege...

Reprise License Manager Path Traversal Vulnerability

Reprise License Manager RLM is a suite of license management software from Reprise, Inc. A path traversal vulnerability exists in RLM version 11.0. An attacker could exploit this vulnerability by changing fields in a web request to gain access to files on the file system...

Trend Micro OfficeScan Buffer Overflow Vulnerability

Trend Micro OfficeScan is a suite of distributed anti-virus software from Trend Micro. A buffer overflow vulnerability exists in Trend Micro OfficeScan version 11.0 and XG. A local attacker could exploit this vulnerability to execute arbitrary code and elevate privileges...

CVE-2017-6643

A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to access sensitive Virtual Directory information on an affected system. The vulnerability exists because the affected software does not sufficiently protect sensiti...

CVE-2017-7952

INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter...

Trend Micro OfficeScan Cross-Site Scripting Vulnerability

Trend Micro OfficeScan is a suite of distributed anti-virus software from Trend Micro. A cross-site scripting vulnerability exists in Trend Micro OfficeScan version 11.0 prior to 11.0 SP1 CP 6325 and XG prior to XG CP 1352, due to a failure to adequately filter user-submitted input. A remote...

Kaltura server cross-site scripting vulnerability (CNVD-2017-02387)

Kaltura is an open source online video platform. kaltura server is one of the servers. A cross-site scripting vulnerability exists in Kaltura server Lynx-12.11.0 and earlier versions, which stems from the program failing to adequately filter user submissions to the...

Brocade Virtual Traffic Manager Cross-Site Request Forgery Vulnerability

Brocade Virtual Traffic Manager BrocadeVTM, formerly SteelAppTrafficManager is an application delivery controller for use in virtual or cloud environments from Brocade Communications Systems Brocade, USA. A cross-site request forgery vulnerability exists in Brocade VTM 11.0 and prior versions. A...

ALPINE-CVE-2016-9444

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted DS resource record in an answer...

CVE-2016-9224

A vulnerability in the Cisco Jabber Guest Server could allow an unauthenticated, remote attacker to initiate connections to arbitrary hosts. More Information: CSCvc31635. Known Affected Releases: 10.69. Known Fixed Releases: 11.00...

CVE-2016-0398

IBM Cognos Analytics CA 11.0 before 11.0.2 allows remote attackers to conduct content-spoofing attacks via a crafted URL...

CVE-2016-0937

Use-after-free vulnerability in the OCG object implementation in Adobe Reader and Acrobat before 11.0.14, Acrobat and Acrobat Reader DC Classic before 15.006.30119, and Acrobat and Acrobat Reader DC Continuous before 15.010.20056 on Windows and OS X allows attackers to execute arbitrary code via...

Apple OS X Directory Utility Privilege Gain Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers. A security vulnerability exists in the Directory Utility in Apple OS X 10.11.0 and earlier versions, which arises from the program failing to properly handle authentication for new sessions. A local attacker could...

PT-2014-2050 · Adobe · Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Reader and Acrobat versions 10.x through 10.1.8 Adobe Reader and Acrobat versions 11.x through 11.0.05 Description: The issue is related to resource management errors in Adobe Acrobat and Adobe Reader. It allows a remote attacker to cau...

acroread: multiple code execution flaws (APSB13-15)

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721,...

acroread: multiple code execution flaws (APSB13-02)

Use-after-free vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors...

SGX-SP Final and SGX-SP Final NE vulnerable to cross-site scripting

Overview SGX-SP Final and SGX-SP Final NE are vulnerable to cross-site scripting. SGX-SP Final and SGX-SP Final NE are shopping cart software. SGX-SP Final and SGX-SP Final NE are vulnerable to cross-site scripting. Yoshinori Ohta of Business Architects Inc. reported this vulnerability to IPA...