423 matches found
Cisco Data Center Network Manager addGroupNavigation XML External Entity Processing Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of requests to the addGroupNavigation SOAP...
The vulnerability of the lmgrd component and the components of the FlexNet Publisher daemon vendor license manager allows a violator to trigger a service failure.
The vulnerability of the lmgrd component and the components of the FlexNet Publisher daemon are related to errors in message processing within the lmadmin service. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the safer_name_suffix function in the GNU Tar archive manager allows a hacker to bypass the intended security measures and write data to arbitrary files.
The vulnerability of the safernamesuffix function in the GNU Tar archive manager exists due to an incorrect restriction on the pathname to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to bypass the intended security measures and write to arbitrary...
CVE-2019-2899
Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware component: OAM. Supported versions that are affected are 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromis...
CVE-2019-11661
Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized access and modification of data...
Improper Access Control
Red Hat JBoss Enterprise Application Platform 6 is a platform for Java applications based on JBoss Application Server 7. It was found that the ParserPool and Decrypter classes in the OpenSAML Java implementation resolved external entities, permitting XML External Entity XXE attacks. A remote...
CVE-2019-10676
In Uniqkey Password Manager 1.14, CVE-2019-10845 describes a vulnerability where the credential-saving pop-up (id="uniqkey-password-popup" / password-popup/popup.html) can be read and manipulated by remote servers. The pop-up persists across pages until a user makes a decision, and the popup wind...
Vdsm Arbitrary Command Execution Vulnerability
oVirt Virtual Desktop Server Manager vdsm is a virtual machine host manager for managing virtual machines running KVM hypervisor technology. The product is capable of managing virtual host storage, memory, and network resources, among other things, and supports the creation of virtual hosts. A...
tecrail Responsive FileManager path traversal vulnerability (CNVD-2019-12900)
tecrail Responsive FileManager is an open source file manager written in PHP by the Italian company tecrail. The product supports the uploading and management of videos, images or other files. A path traversal vulnerability exists in the 'getfile' function of the ajaxcalls.php file in version...
The vulnerability of the Manager component in the real-time data synchronization tool Oracle GoldenGate, which allows a hacker to trigger a service failure.
The vulnerability of the Manager component in the real-time data synchronization tool Oracle GoldenGate relates to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending an incorrect command during the TCP connection...
Pulse Secure Virtual Traffic Manager Information Disclosure Vulnerability
Pulse Secure Virtual Traffic Manager is a software-based, high-performance application delivery controller from Pulse Secure, USA. A security vulnerability exists in Pulse Secure Virtual Traffic Manager versions 9.9 prior to 9.9r2 and 10.4r1 prior to 10.4r1, which stems from the program failing t...
Unspecified Vulnerability in Aruba ClearPass Policy Manager
Aruba ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. The system manages everything related to BYOD Bring Your Own Device in a single location.Policy Manager is one of the policy managers. A security...
Joomla! 3.2.x < 3.8.8 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - ACL violation in access levels affects Joomla 2.5.0 through 3.8.7 - Adding phar files to the upload blacklist affects Joomla 2.5.0 through 3.8.7 - Information Disclosure abo...
Joomla! 3.0.x < 3.8.8 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - ACL violation in access levels affects Joomla 2.5.0 through 3.8.7 - Adding phar files to the upload blacklist affects Joomla 2.5.0 through 3.8.7 - Information Disclosure abo...
Joomla! 3.5.x < 3.8.8 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - ACL violation in access levels affects Joomla 2.5.0 through 3.8.7 - Adding phar files to the upload blacklist affects Joomla 2.5.0 through 3.8.7 - Information Disclosure abo...
Joomla! 3.8.x < 3.8.8 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - ACL violation in access levels affects Joomla 2.5.0 through 3.8.7 - Adding phar files to the upload blacklist affects Joomla 2.5.0 through 3.8.7 - Information Disclosure abo...
Joomla! 3.3.x < 3.8.8 Multiple Vulnerabilities
According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - ACL violation in access levels affects Joomla 2.5.0 through 3.8.7 - Adding phar files to the upload blacklist affects Joomla 2.5.0 through 3.8.7 - Information Disclosure abo...
Unspecified Vulnerability in Oracle GoldenGate (CNVD-2018-24130)
Oracle GoldenGate is the United States Oracle Oracle company for real-time data integration and replication in IT environments, a comprehensive software package, which supports real-time data integration, transactional change data capture, data services, transformation and validation capabilities...
D-Link Central WiFi Manager Cross-Site Scripting Vulnerability (CNVD-2018-20464)
D-Link Central WiFi Manager is a WiFi management system from AUO D-Link. A cross-site scripting vulnerability exists in the 'sitename' parameter of the UpdateSite endpoint in versions prior to D-Link Central WiFi Manager 1.03r0100-Beta1. A remote attacker can exploit this vulnerability to inject...