SQL injection vulnerability in viewChannerParamXml.jsp file id parameter of Enterprise Customer Management Platform (ECMP)

Enterprise letter is the use of java development of a special tailored to the enterprise customer value-added SMS business, enterprise customers in the use of computers at the same time can be completed with the production of office combined with the internal SMS communication. SQL injection...

AlienVault OSSIM and USM Remote Command Execution Vulnerabilities

AlienVault OSSIM and USM are both products of AlienVault Corporation, U.S.A. OSSIM is an open source security information management system. USM is a security management platform that provides security monitoring, security event management and reporting, and threat awareness system. A remote...

S2-046 and S2-045 Remote Code Execution Vulnerabilities in AVCON6 System Management Platform of Huaping Information Technology Co.

Huaping Information Technology Co., Ltd. is a multimedia communication system and smart city solution provider. S2-046 and S2-045 remote code execution vulnerabilities exist in the AVCON6 system management platform of Huaping Information Technology Co. It allows an attacker to remotely execute...

Aruba AirWave Management Platform XML External Entity Injection Vulnerability

Aruba AirWave is Aruba's suite of network management software for multi-vendor management systems that provides end-to-end monitoring capabilities to improve network operations and manage RF security, as well as real-time monitoring and proactive alerting and reporting. AirWave Management Platfor...

Red Hat CloudForms Denial of Service Vulnerability

Red Hat CloudForms is a suite of IaaS Infrastructure as a Service cloud services solutions from Red Hat, Inc. The solution creates and manages private and public clouds and has the ability to manage the application lifecycle. A denial of service vulnerability exists in Red Hat CloudForms. A remot...

Cisco Secure Firewall Management Center Detection

Cisco Secure Firewall Management Center is running on the remote host. Cisco Secure Firewall Management Center is a comprehensive management platform for managing firewalls, application control, intrusion prevention, URL filtering, and advanced malware protection. It was possible to obtain versio...

Moderate: Red Hat Security Advisory: org.ovirt.engine-root security, bug fix, and enhancement update

An update for org.ovirt.engine-root is now available for RHEV Engine version 4.0. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 6 : Virtualization Manager (RHSA-2016:1929)

An update for org.ovirt.engine-root is now available for RHEV Manager version 3.6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

AlienVault Unified Security Management Remote Command Execution Vulnerability

AlienVault Unified Security Management USM is a security management platform from AlienVault, Inc. that provides security monitoring, security event management and reporting, and threat awareness systems. A remote command execution vulnerability exists in AlienVault Unified Security Management US...

SQL injection vulnerability in the gid parameter of the Default.aspx page of the CMS system of the resource management platform of Beijing HBM Information Technology Co.

Resource Management Platform CMS is a comprehensive management and application platform based on the cloud service system, through a multi-layer system architecture, establishing a multi-level cloud platform and cloud application environment covering provinces, municipalities, counties, schools a...

Joyent Smart Data Center 'Docker API' Local Elevation of Privilege Vulnerability

Joyent Smart Data Center SDC is an open source cloud management platform from Joyent, Inc. A local elevation of privilege vulnerability exists in the Joyent Smart Data Center 'Docker API'. A local attacker could exploit this vulnerability to execute arbitrary code with elevated privileges...

Samsung Security Manager Denial of Service Vulnerability

Samsung Security Manager SSM is a set of South Korea's Samsung Samsung company's video equipment, the central management platform, which supports site group management, display the list of registered devices, through the mouse drag and drop or double-click operation to achieve the specified video...

Remote Code Execution Vulnerability in Samsung Security Manager

Samsung Security Manager SSM is a set of South Korea's Samsung Samsung company's video equipment, the central management platform, which supports site group management, display the list of registered devices, through the mouse drag and drop or double-click operation to achieve the specified video...

Thousand OA collaborative office management platform GovReceiveFileAction. do RecordID parameter id injection vulnerability

No description provided by source...

Aruba Networks ArubaO/AirWave Management Platform and Instant Security Bypass Vulnerability

ArubaOS is an operating system for Aruba Mobility-Defined Networks; AirWave Management Platform is a wireless network management software. A security vulnerability exists in Aruba Networks ArubaOS, AMP, and Aruba Instant that could be exploited by remote attackers to bypass security restrictions,...

Moderate: Red Hat Security Advisory: ceph security update

An updated ceph package that fixes one security issue is now available for Red Hat Ceph Storage 1.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

XpoLog Center 6 XSS / CSRF / Open Redirect

XpoLog Center V6 Multiple Remote Vulnerabilities Vendor: XpoLog LTD Product web page: http://www.xpolog.com Affected version: 6.4469 6.4254 6.4252 6.4250 6.4237 6.4235 5.4018 Summary: Applications Log Analysis and Management Platform. Desc: XpoLog suffers from multiple vulnerabilities including...

APP365 online Logistics Management Platform stationList. jspx parameter city_name SQL injection vulnerability

No description provided by source...

Multiple vulnerabilities fixed in Aruba networks products

Multiple vulnerabilities have been discovered in various Aruba Networks products including Instant and ArubaOS access points, the Airwave management platform and the PAPI protocol that these systems mutually use. Some vulnerabilities have been fixed, others will be fixed in a future update, and f...

Aruba Authentication Bypass / Insecure Transport / Tons Of Issues

Aruba ArubaOS/Aruba Instant/AirWave Management - Multiple Vulnerabilities ------------------------------------------------------------------------- Introduction ============ Multiple vulnerabilities were identified in Aruba AP, IAP and AMP devices. The Vulnerabilities were discovered during a bla...