IBM BigFix Platform Information Disclosure Vulnerability (CNVD-2017-33742)

IBM BigFix platform is a dynamic set of IBM's integrated messaging content-driven and management system multi-technology platform. An information disclosure vulnerability exists in IBM BigFix Platform versions 9.5.4 and earlier and 9.2.9 and earlier, which stems from the program's failure to...

IBM BigFix Platform Web Report Component Information Disclosure Vulnerability (CNVD-2017-32864)

IBM BigFix Platform formerly IBM Tivoli Endpoint Manager is a system management software. An information disclosure vulnerability exists in IBM BigFix Platform 9.2 and 9.5. The vulnerability arises due to a failure to properly enable the secure cookie attribute. An attacker could exploit the...

IBM BigFix Platform Web Report Component Information Disclosure Vulnerability

IBM BigFix Platform is a dynamic set of IBM's integrated messaging content-driven and management system for multi-technology platforms. web report compoment is one of the web reporting component. An information disclosure vulnerability exists in the Web Report component of the IBM BigFix Platform...

Joomla! Realtyna RPL (com_rpl) component cross-site request forgery vulnerability

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features.Realtyna RPL comrpl component is one of the real estate information component. A cross-site request forgery vulnerabili...

IBM Emptoris Sourcing Cross-Site Scripting Vulnerability (CNVD-2017-25049)

IBM Emptoris Sourcing is a source-to-contract solution from IBM USA. The solution helps organizations get affordable prices and greater value from suppliers by examining factors such as cost, risk and performance in sourcing decisions. A cross-site scripting vulnerability exists in IBM Emptoris...

Local Authentication Bypass Vulnerability in Multiple McAfee Products

McAfee SIEM Enterprise Security Manager and SIEM Event Receiver are both products of McAfee, Inc. McAfee SIEM Enterprise Security Manager provides intelligent, fast, and accurate security and information SIEM and log management. SIEM Event Receiver collects third-party events and logs and...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2016-10907)

Adobe Connect formerly known as Macromedia Breeze is a set of enterprise-level web-based communication solutions from the U.S. company Audobee Adobe. The program provides web conferencing, e-learning and webinar features. A cross-site scripting vulnerability exists in Adobe Connect 9.5.6 and prio...

CVE-2016-0249

SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2016-0292

WebReports in IBM BigFix Platform formerly Tivoli Endpoint Manager 9.x before 9.5.2 allows local users to discover the cleartext system password by reading a report...

Adobe Connect untrustworthy search path vulnerability

Adobe Connect formerly known as Macromedia Breeze is a set of enterprise-level web-based communication solutions from the U.S. company Audobee Adobe. The program provides web conferencing, e-learning and webinar features. An untrustworthy search path vulnerability exists in Adobe Connect 9.5.2 an...

PostgreSQL Security Bypass Vulnerability (CNVD-2016-02169)

PostgreSQL is a free object-relational database management system developed by the PostgreSQL development group. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, and so on. A security bypass vulnerability exists in PostgreSQL...

CVE-2015-5043

diag in IBM Security Guardium 8.2 before p6015, 9.0 before p6015, 9.1, 9.5, and 10.0 before p6015 allows local users to obtain root access via unspecified key sequences...

acroread: multiple code execution flaws (APSB13-15)

Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2013-2718, CVE-2013-2719, CVE-2013-2720, CVE-2013-2721,...

PT-2013-3898 · Adobe +2 · Reader +3

Name of the Vulnerable Software and Affected Versions: Adobe Reader and Acrobat versions 9.x through 9.5.4 Adobe Reader and Acrobat versions 10.x through 10.1.6 Adobe Reader and Acrobat versions 11.x through 11.0.02 Description: The issue is related to an integer overflow that allows attackers to...

acroread: multiple code execution flaws (APSB13-02)

Use-after-free vulnerability in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrary code via unspecified vectors...

acroread: multiple unspecified flaws (APSB12-08, APSB12-01)

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2011-4372 and CVE-2011-4373...

Pages held in frames are able to change the location of pages in unrelated frames on the parent page – Opera Security Advisories

Pages held in frames are able to change the location of pages in unrelated frames on the parent page – Opera Security Advisories OPCOM Team | June 11, 2008 Severity: Less Severe Problem Description: Pages from different sources held on the same parent page should not be able to modify the locatio...

bind use-after-free

Use-after-free vulnerability in ISC BIND 9.3.0 up to 9.3.3, 9.4.0a1 up to 9.4.0a6, 9.4.0b1 up to 9.4.0b4, 9.4.0rc1, and 9.5.0a1 Bind Forum only allows remote attackers to cause a denial of service named daemon crash via unspecified vectors that cause named to "dereference a freed fetch context."...