China Telecom's Smart Gateway Management Platform Has Information Leakage Vulnerabilities

China Telecom Group Corporation is a large state-owned communications enterprise in China, the global partner of Shanghai World Expo, and one of the world's top 500 enterprises for many years, mainly engaged in fixed-line telephony, mobile communications, satellite communications, Internet access...

The vulnerability of the dbman service of the HPE Intelligent Management Center PLAT software platform allows a perpetrator to delete arbitrary files.

The vulnerability of the dbman service in the HPE Intelligent Management Center PLAT software platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to remotely delete arbitrary files...

Micro Focus NetIQ eDirectory Login Restriction Vulnerability

Micro Focus NetIQ eDirectory is an identity management infrastructure platform from Micro Focus UK that combines identity management architecture and directory services technology. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. A...

SQL Injection Vulnerability in API Interface of Top Internship Management Platform of Wuhan Xinhongbo Technology Co.

Top Internship Management Platform is a management platform launched by Wuhan Xinhongbo Technology Co., Ltd. which can manage and monitor the top internship process of students in a comprehensive and intuitive way. There is a SQL injection vulnerability in the API interface of Wuhan Xinhongbo...

Remote file inclusion

A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system...

CVE-2018-0013 Junos Space: Local File Inclusion Vulnerability

A local file inclusion vulnerability in Juniper Networks Junos Space Network Management Platform may allow an authenticated user to retrieve files from the system...

CVE-2018-0013

CVE-2018-0013 affects Juniper Networks Junos Space Network Management Platform. The vulnerability is a local file inclusion that may allow an authenticated user to retrieve files from the system. Public data lists CVSS v3.0 base score 6.5 (MEDIUM) with network attack vector, low complexity, and p...

The vulnerability of Juniper Networks’ Junos Space Network Management Platform, related to authentication procedures that lack sufficient safeguards, allows attackers to gain access to the system with privileged user privileges.

The vulnerability of Juniper Networks’ Junos Space Network Management Platform relates to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain access to the system with privileged user privileges from a remote location...

CVE-2017-10622

An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases...

Authentication flaw

An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases...

CVE-2017-10622 Junos Space: Authentication bypass vulnerability

An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote unauthenticated network based attacker to login as any privileged user. This issue only affects Junos Space Network Management Platform 17.1R1 without Patch v1 and 16.1 releases...

CVE-2017-10622

Juniper Networks Junos Space Network Management Platform is affected by an authentication bypass vulnerability (CVE-2017-10622). A remote unauthenticated attacker could login as any privileged user. Affected are Junos Space versions 17.1R1 without Patch v1 and 16.1 releases prior to 16.1R3. The i...

IBM MaaS360 DTM Information Disclosure Vulnerability

IBM MaaS360 DTM is a suite of enterprise mobile device management solutions from IBM USA. The solution provides end-to-end security and management of mobile devices, documents, applications and email. An information disclosure vulnerability exists in versions of IBM MaaS360 DTM prior to 3.81, whi...

HPE Intelligent Management Center PLAT Arbitrary Code Execution Vulnerability (CNVD-2017-216977)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. An arbitrary code execution...

HPE Intelligent Management Center PLAT Arbitrary Code Execution Vulnerability (CNVD-2017-216922)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. An arbitrary code execution...

OSIsoft PI Integrator

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: OSIsoft Equipment: PI Integrator Vulnerabilities: Cross-Site Scripting, Improper Authorization AFFECTED PRODUCTS The following versions of PI Integrator, a data management platform, are affected: PI Integrator for SAP...

CVE-2016-6019

IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trust...

Authentication flaw

Red Hat 3scale aka RH-3scale API Management Platform AMP before 2.0.0 would permit creation of an access token without a client secret. An attacker could use this flaw to circumvent authentication controls and gain access to restricted APIs. NOTE: some sources have a typo in which CVE-2017-7512...

Synology Note Station Cross-Site Scripting Vulnerability

Synology Note Station is a cloud-based note management platform from China-based Synology Inc. A cross-site scripting vulnerability exists in Synology Note Station. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML via attached file names or note names...

CVE-2017-7512

Red Hat 3scale aka RH-3scale API Management Platform AMP before 2.0.0 would permit creation of an access token without a client secret. An attacker could use this flaw to circumvent authentication controls and gain access to restricted APIs. NOTE: some sources have a typo in which CVE-2017-7512...