CVE-2012-2555

CVE-2012-2555 entry is rejected; not associated with any vulnerability, and does not represent an active vulnerability entry.

CVE-2016-8247

CVE-2016-8247 is rejected/not used as an active vulnerability entry.

CVE-2004-0818

CVE-2004-0818 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2012-4138

CVE-2012-4138 is rejected and does not represent an active vulnerability entry.

CVE-2012-6221

This CVE-2012-6221 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2013-6568

CVE-2013-6568 entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2009-3394

CVE-2009-3394 is rejected/not used and does not represent an active vulnerability entry.

CVE-2013-3901

CVE-2013-3901 is associated with MS13-089 and is described in connected advisories as a remote code execution vulnerability in the Windows Graphical Device Interface (GDI) caused by an integer overflow. The linked sources name the affected component as GDI; no specific vulnerable product versions...

PT-2017-18519

Name of the Vulnerable Software and Affected Versions Quick Heal Internet Security version 10.1.0.316 Quick Heal Total Security version 10.1.0.316 Quick Heal AntiVirus Pro version 10.1.0.316 Description The issue concerns the lack of Address Space Layout Randomization ASLR and Data Execution...

Remote Code Execution

mongo-parse is vulnerable to remote code execution RCE. A malicious user can inject and execute arbitrary code due to the lack of sanitization of user input before executing the eval function...

The vulnerability of the Microsoft Outlook email client, which allows a hacker to compromise the confidentiality of information.

The vulnerability of the Microsoft Outlook email client is related to lack of access control. Exploiting this vulnerability allows a malicious actor to bypass the security measures of office programs by using a specially created document...

PT-2017-15695

Name of the Vulnerable Software and Affected Versions Apache Hadoop versions prior to 2.7.0 Description The issue arises from the interaction between HDFS clients and a servlet on the DataNode, which allows browsing the HDFS namespace. A query parameter, specifically the NameNode, is not validate...

PT-2017-16376

Name of the Vulnerable Software and Affected Versions NetIQ Access Manager versions 4.2 through 4.3 Description A security issue exists due to the lack of validation of the HTTP Referer header in Access Gateway Error pages on the "/NAGErrors" URI. This allows for a potential security risk...

CVE-2017-7951

WonderCMS before 2.0.3 has CSRF because of lack of a token in an unspecified context...

CVE-2017-7951

WonderCMS before 2.0.3 has CSRF because of lack of a token in an unspecified context...

PT-2017-18023

Name of the Vulnerable Software and Affected Versions WonderCMS versions prior to 2.0.3 Description The issue is related to a lack of a token in an unspecified context, leading to CSRF. Recommendations For versions prior to 2.0.3, update to version 2.0.3 or later to resolve the issue...

PT-2017-17185

Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Probe Software version 1.0.0 Description The issue is related to the file-download feature of the web user interface, where the absence of role-based access control RBAC for file-download requests allows an authenticated,...

CVE-2017-6614: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the file-download feature of the web user interface for Cisco FindIT Network Probe Software 1.0.0 could allow an authenticated, remote attacker to download and view any system file by using the affected software. The vulnerability is due to the absence of role-based access...

IBM Domino SEoL (<= 1.3.x)

According to its version, the IBM Domino formerly IBM Lotus Domino install is prior to or equal to 1.3.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may...

PT-2017-17748

Name of the Vulnerable Software and Affected Versions Moxa MXView version 2.8 Description The issue allows remote attackers to read the web server's private key file due to a lack of access control. Recommendations For Moxa MXView version 2.8, consider restricting access to the private key file a...