383 matches found
File Inclusion Vulnerability in the fileservice/FileManage.asmx?op page of the SmartLearning system of Xinwei Software
SmartLearning system of Shenzhen Xinwei Software Co., Ltd. is an online learning platform. A file inclusion vulnerability exists in the fileservice/FileManage.asmx?op page of the SmartLearning system of Xinwei Software. An attacker can use the vulnerability to download website files and obtain...
NetApp MetroCluster Tiebreaker for clustered Data ONTAP Information Disclosure Vulnerability
NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from the American company NetApp. An information disclosure vulnerability exists in NetApp MetroCluster Tiebreaker for clustered Data ONTAP, which allows remote attackers to submit a special request to obtain...
Linux kernel local information disclosure vulnerability (CNVD-2016-05852)
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local information disclosure vulnerability exists in Linux kernel, which can be exploited by local attackers to obtain sensitive information...
Lepton memory corruption vulnerability (CNVD-2016-05179)
Lepton is a set of tools for lossless compression of JPEG format files. A memory corruption vulnerability exists in Lepton, which can be exploited by attackers to obtain sensitive information and cause a denial of service...
CVE-2016-2022
HPE Systems Insight Manager SIM before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2030...
Cybozu Garoon Information Disclosure Vulnerability
Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists ...
Multiple Vulnerabilities in HPE Matrix Operating Environment (CNVD-2016-03743)
HPE Matrix Operating Environment is a suite of cloud management software designed for infrastructure services. HPE Matrix Operating Environment has multiple security vulnerabilities that could be exploited by remote attackers to obtain sensitive information, execute arbitrary code, gain...
phpcms v9 后台任意文件读取(可获取authkey)
No description provided by source...
Google Chrome V8 Information Disclosure Vulnerability (CNVD-2016-02824)
Google Chrome is a popular web browser. Google Chrome V8 suffers from an information disclosure vulnerability that allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by users and can be used to obtain sensitive information...
KLA10789 Multiple vulnerabilities in Microsoft Browsers
Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory corruption vulnerability in Microsoft Browser can be...
The vulnerability of the Moodle learning management system allows a hacker to obtain the user’s password.
The vulnerability of the mtrand function in implementations of randomstring and complexrandomstring of the Moodle learning management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain user passwords usin...
Linux Kernel 'btrfs/inode.c' Information Disclosure Vulnerability
Linux kernel is an open source operating system. Linux kernel 'btrfs/inode.c' has a security vulnerability that allows attackers to exploit the vulnerability to obtain sensitive information...
Mozilla Firefox ESR Multiple Vulnerabilities (Nov 2015) - Mac OS X
Mozilla Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...
KLA10671 Flash Player update for Google Chrome
Google Chrome was updated to address vulnerabilities in Flash Player. For details look at KLA10670. Original advisories Blog entry Exploitation Public exploits exist for this vulnerability. Related products Google-Chrome CVE list CVE-2015-5573 critical CVE-2015-5574 critical CVE-2015-5575 critica...
Apple iOS mail sender address handling vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A security vulnerability in Apple iOS mail handling of sender addresses allows attackers to exploit the vulnerability to obtain sensitive information...
NetCat.ru NetCat CMS Directory Traversal Vulnerability
NetCat.ru NetCat CMS is a content management system. A directory traversal vulnerability in NetCat.ru NetCat CMS allows remote attackers to exploit the vulnerability to traverse the directory and obtain sensitive information...
Microsoft Internet Explorer Clipboard Information Disclosure Vulnerability
Microsoft Internet Explorer is a WEB-based browser. A security vulnerability in Microsoft Internet Explorer's handling of the clipboard allows remote attackers to exploit the vulnerability to construct malicious WEB pages, which can be parsed by the user and can be used to obtain sensitive...
CVE-2015-1130
The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
KLA10520 Multiple vulnerabilities in HP Operations Orchestration
An unspecified vulnerabilities were found in HP Operations Orchestration. By exploiting these vulnerabilities malicious users can bypass authentication,obtain sensitive information or modify data. These vulnerabilities can be exploited remotely via an unknown vector. Original advisories HP securi...
