Unspecified Cross-Site Scripting Vulnerability in SAP NetWeaver Monitoring Application

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An unspecified cross-site scripting vulnerability exists in SAP NetWeaver Monitoring Application. The...

Palo Alto Networks Terminal Services Information Disclosure Vulnerability

Terminal Services Agent is a suite of terminal services agent programs from Palo Alto Networks, Inc. An information disclosure vulnerability exists in Palo Alto Networks Terminal Services. An attacker could exploit this vulnerability to obtain sensitive information and launch further attacks...

CVE-2016-9720

IBM QRadar 7.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM Reference : 1999533...

KDE kio and kdelibs Information Disclosure Vulnerability

KDE kio and kdelibs are both products of the KDE company. kdelibs was created on top of the Qt framework, which provides the framework and many features to develop KDE software. An information disclosure vulnerability exists in KDE kio prior to version 5.32 and kdelibs prior to version 4.14.30. A...

Cisco Prime Collaboration Assurance Information Leakage Vulnerability

Cisco Prime Collaboration Assurance is a video and voice services solution. A remote information leakage vulnerability exists in Cisco Prime Collaboration Assurance. An attacker could exploit this vulnerability to obtain sensitive information and cause further attacks...

IBM Security Key Lifecycle Manager Security Bypass Vulnerability

IBM Security Key Lifecycle Manager formerly known as Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A security bypass vulnerability exist...

Cisco Intrusion Prevention System Device Manager Information Leakage Vulnerability

Cisco Intrusion Prevention System is an intrusion prevention system. A remote information leakage vulnerability exists in Cisco Intrusion Prevention System Device Manager. An attacker could exploit this vulnerability to obtain sensitive information and launch further attacks...

Jenkins Information Disclosure Vulnerability (CNVD-2017-01344)

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . An...

Alaris 8015 PC Unit Information Disclosure Vulnerability

The Alaris 8015 PC unit is the centerpiece of the Alaris System, an American BD system that provides a user-common interface for programming IV infusions. An information disclosure vulnerability exists in the Alaris 8015 PC unit. An attacker could exploit the vulnerability to obtain sensitive...

Google Android Information Disclosure Vulnerability (CNVD-2017-01564)

Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Google Android suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain potentially sensitive information, and the...

CVE-2016-6099

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system...

CVE-2016-6020

IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to ...

Cisco WebEx Meetings Server Information Disclosure Vulnerability (CNVD-2017-00870)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. An information disclosure vulnerability exists in Cisco WebEx Meetings Server. An attacker could exploit this...

Phoenix Contact mGuard Security Bypass Vulnerability

Phoenix Contact mGuard is a security device from Phoenix Contact that protects systems from unauthorized access and installation. A security bypass vulnerability exists in Phoenix Contact mGuard. An attacker could use this vulnerability to bypass security restrictions and perform unauthorized...

IBM Sterling Order Management Information Disclosure Vulnerability (CNVD-2017-00862)

IBM Sterling Order Management is a suite of order management software that orchestrates the cross-channel sales and order fulfillment process across a dynamic business network of customers, suppliers and partners. A remote information disclosure vulnerability exists in IBM Sterling Order...

Google Android Audioserver Information Disclosure Vulnerability (CNVD-2017-00211)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There are information disclosure vulnerabilities in Google Android. Attackers can exploit these vulnerabilities to obtain potentially sensitive information, and the information...

Google Android Audioserver Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There are information disclosure vulnerabilities in Google Android. Attackers can exploit these vulnerabilities to obtain potentially sensitive information, and the information...

OpenSSH Security Bypass Vulnerability

OpenSSH OpenBSD Secure Shell is a set of connection tools maintained by the OpenBSD Project Group for secure access to remote computers. A security bypass vulnerability exists in OpenSSH. An attacker could use the vulnerability to bypass certain security restrictions and perform unauthorized...

Mozilla Network Security Services Information Disclosure Vulnerability

Mozilla Network Security Services NSS is the United States Mozilla Foundation developed a library network security services library, it can provide cross-platform support for SSL, S/MIME and other Internet security standards. An information disclosure vulnerability exists in Mozilla Network...

Docker Security Bypass Vulnerability (CNVD-2016-11230)

Docker is an open source application container engine from Docker Inc. in the United States, which supports the creation of a container lightweight virtual machine and deployment and running applications on Linux systems, as well as automated installation, deployment and upgrading of applications...