334 matches found
Unspecified Vulnerability in IBM Security Guardium Big Data Intelligence
IBM Security Guardium Big Data Intelligence SonarG is a suite of big data security intelligence solutions from IBM, USA. The solution features interactive data exploration, automated connectivity analysis, and user activity analysis. A security vulnerability exists in IBM Security Guardium Big Da...
SilverStripe assets has an unspecified vulnerability
SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . assets is one of the assets component . silverStripe assets 4.0 version of a security...
PT-2019-7663 · WordPress · All-In-One-Wp-Security-And-Firewall
Name of the Vulnerable Software and Affected Versions: all-in-one-wp-security-and-firewall plugin versions prior to 4.0.6 Description: The issue concerns a cross-site scripting XSS problem in the settings pages of the plugin. Recommendations: For versions prior to 4.0.6, update to version 4.0.6 o...
redis: Heap corruption in lua_cmsgpack.c
Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows...
PT-2019-13238 · Xpdf · Xpdf
Name of the Vulnerable Software and Affected Versions: Xpdf version 4.01.01 Description: The issue is a heap-based buffer over-read in the JBIG2Stream::readTextRegionSeg function, which can be triggered by sending a crafted PDF document to the pdftoppm tool. This might allow an attacker to cause...
CVE-2019-0172
A logic issue in Intel UniteR Client for Android prior to version 4.0 may allow a remote attacker to potentially enable escalation of privilege via network access...
Cybozu Garoon Access Control Error Vulnerability (CNVD-2019-12695)
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An access control error vulnerability exists in Cybozu Garoon versions 4.0.0 through 4.10.1. The vulnerability...
CVE-2018-2442
In SAP BusinessObjects Business Intelligence, versions 4.0, 4.1 and 4.2, while viewing a Web Intelligence report from BI Launchpad, the user session details captured by an HTTP analysis tool could be reused in a HTML page while the user session is still valid...
Unauthorized Access Vulnerability in txjcms v4.0
Skywalker Networks is an Internet integrated service platform provider. An unauthorized access vulnerability exists in txjcms v4.0. An attacker can exploit this vulnerability to gain control of the web server...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15866)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "user update" method in versions of Quest DR Series disk backup software prior to version 4.0.3.1. An attacker could exploit this vulnerability to execute arbitrary system commands...
Quest DR Series Disk Backup Software Elevation of Privilege Vulnerability (CNVD-2018-15910)
The Quest DR Series are disk storage and deduplication appliances. An elevation of privilege vulnerability exists in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability via a local script to elevate privileges from web server user to root...
IDM Denial of Service Vulnerability
NetIQ IDM also known as NetIQ Identity Manager is the United States NetIQ company's set of solutions to provide authentication and control access. Identity Applications is one of the authentication applications. Bi-directional driver is one of the two-way driver. A security vulnerability exists i...
UBUNTU-CVE-2018-10963
The TIFFWriteDirectorySec function in tifdirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service assertion failure and application crash via a crafted file, a different vulnerability than CVE-2017-13726...
Apache Karaf LDAP Injection Vulnerability
Apache Karaf is open source OSGi based runtime environment. Apache Karaf version before 4.0.8 through the LDAPLoginModule to authenticate the user directory access through LDAP , there is a security vulnerability in the implementation , successful exploitation can lead to LDAP injection attacks ,...
Arbitrary File Editing Vulnerability in BEESCMS Version v4.0
BEESCMS is an enterprise website management system based on PHP+Mysql architecture. BEESCMS v4.0 version of the existence of arbitrary file editing vulnerability, the vulnerability stems from the file path to modify the file and the content of the file to be written into the file are not filtered...
Squid Software Foundation Squid HTTP Caching Proxy Denial of Service Vulnerability (CNVD-2018-05766 )
Squid Software Foundation Squid HTTP Caching Proxy is an open source HTTP caching proxy software . A security vulnerability exists in the handling of HTTP Response X-Forwarded-For packet headers in versions of Squid Software Foundation Squid HTTP Caching Proxy prior to 4.0.23. An attacker could...
Web Security Dog (Apache Edition) V4.0 suffers from SQL Injection Vulnerability
Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition V4.0 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability...
libgig Denial of Service Vulnerability (CNVD-2017-27701)
libgig is a C++ library for loading, modifying existing and creating new Gigasampler .gig files and DLS downloadable sound Level 1/2 files, KORG sample instruments .KSF and .KMP files, SoundFont v2 .sf2 files and AKAI sampler data. A denial of service vulnerability exists in the function LoadStri...
CVE-2017-1431
IBM InfoSphere Streams 4.0, 4.1, and 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127632...