D-Link Central WiFi Manager Cross-Site Scripting Vulnerability (CNVD-2018-20464)

D-Link Central WiFi Manager is a WiFi management system from AUO D-Link. A cross-site scripting vulnerability exists in the 'sitename' parameter of the UpdateSite endpoint in versions prior to D-Link Central WiFi Manager 1.03r0100-Beta1. A remote attacker can exploit this vulnerability to inject...

CVE-2018-10510

A Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager versions 6.0 and 7.0 could allow an attacker to execute arbitrary code on vulnerable installations...

Frog CMS Cross-Site Scripting Vulnerability (CNVD-2018-08549)

Frog CMS is a content management system CMS developed by software developer Philippe Archambault. The system provides tools for page templates, user rights management, and document management. A cross-site scripting vulnerability exists in Frog CMS version 0.9.5. A remote attacker can exploit the...

IBM Security Privileged Identity Manager Information Disclosure Vulnerability (CNVD-2018-08470)

IBM Security Privileged Identity Manager ISPIM is an identity management product within IBM Identity Governance and Management, an identity governance solution from IBM Corporation, USA, that protects, automates and audits the use of privileged identities,... It is designed to protect, automate a...

Information Disclosure Vulnerability in Multiple IBM Products (CNVD-2018-08000)

IBM Maximo Asset Management and others are products of IBM Corporation in the U.S. Maximo Asset Management and Maximo Asset Management Essentials are comprehensive asset lifecycle and maintenance management solutions.Tivoli Service Tivoli Service Request Manager is an IT service management...

Tripwire IP360 VnE Manager Security Bypass Vulnerability

The Tripwire formerly known as nCircle IP360 VnE Manager is an IT asset management appliance from Tripwire USA. A security vulnerability exists in the RPC service in Tripwire IP360 VnE Manager version 7.2.2 prior to 7.2.6. A remote attacker can exploit the vulnerability with the help of specially...

EMC RSA Authentication Manager Cross-Site Scripting Vulnerability (CNVD-2017-35692)

EMC RSA Authentication Manager is a centralized binary authentication software from EMC. The software centralizes the management of binary authentication, security tokens, methods and users across physical sites. A cross-site scripting vulnerability exists in versions of EMC RSA Authentication...

CVE-2017-10260

CVE-2017-10260 affects Oracle Integrated Lights Out Manager (ILOM) in Oracle Sun Systems Products Suite (subcomponent: System Management) prior to version 3.2.6. An unauthenticated attacker with network access via HTTP can cause a hang or frequent crashes (complete DOS). CVSS 3.0 base score 7.5 (...

CVE-2017-11421

gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI files, aka the "Bad Taste" issue. There is a local attack if the victim uses the GNOME Files file manager, and navigates to a directory containing a .msi file with VBScript code in its filename...

Oracle Automatic Service Request Local Vulnerability (CNVD-2017-08118)

Oracle Automatic Service Request is the ability to quickly save the system state when hardware problems occur, with features such as a secure and accelerated diagnostic process, automatic service request generation, and prioritized service request processing. A local security vulnerability exists...

LEPTON 2.2.2 - Remote Code Execution

Security Advisory - Curesec Research Team 1. Introduction Affected Product: LEPTON 2.2.2 stable Fixed in: 2.3.0 Fixed Version Link: http://www.lepton-cms.org/posts/important-lepton-2.3.0-101.php Vendor Website: http://www.lepton-cms.org/ Vulnerability Type: Code Execution Remote Exploitable: Yes...

Microsoft Boot Manager Security Feature Bypass Vulnerability (3193479)

This host is missing an important security update according to Microsoft Bulletin MS16-140. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

The vulnerability of the Oracle Sun Systems Product Suite software allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.

The vulnerability of the Integrated Lights Out Manager ILOM component in the Oracle Sun Systems Product Suite is related to code errors. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, availability, and confidentiality of information...

PHP File Manager 'phpfm.php' Authentication Bypass Vulnerability

PHP File Manager is a suite of applications for managing web sites using PHP scripts. An authentication bypass vulnerability exists in PHP File Manager. An attacker can exploit this vulnerability to obtain a valid session and execute shell commands using restricted functionality...

The vulnerability of the Oracle Database database management system allows a hacker to execute arbitrary code.

The vulnerability of the Workspace Manager component of the Oracle Database management system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely through network packets...

The vulnerability of the Cisco Unified Communications Manager system allows a intruder to inject arbitrary web or HTML code.

The vulnerability of the Cisco Unified Communications Manager IP telephony management system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code using a specially crafted parameter...

Microsoft System Center Operations Manager Cross-Site Scripting Vulnerability

Microsoft System Center Operations Manager is a Microsoft architecture for effective monitoring and management of IT environments, providing views of operational status, performance information, and generating alerts based on availability, performance, configuration, or security conditions. A...

Symantec Endpoint Protection Manager Directory Traversal Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. SEPM 12.1-RU6-MP1 A directory traversal vulnerability exists in the management console o...

IBM Tivoli Federated Identity Manager Cross-Site Scripting Vulnerability (CNVD-2015-04576)

IBM Tivoli Federated Identity Manager is a solution that provides identity management policies. An input validation vulnerability in IBM Tivoli Federated Identity Manager allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access...

The vulnerability of the microprogramming software of the Cisco Unified Communications Manager allows a remote attacker to gain unauthorized access to the device.

The function for receiving messages in the ntpproto.c file continues to operate even after an error message is displayed. This allows a remote attacker to gain unauthorized access to the device using specially crafted packets...