718 matches found
Cloud EC E-commerce System v1.2 System SQL Injection Vulnerability
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of open source e-commerce system software based on PHP + MYSQL independently developed by Yunmai E-commerce Co. Cloud EC e-commerce system version 1.2 SQL injection vulnerability, remote attackers can exploit the vulnerabilit...
CVE-2018-0316
A vulnerability in the Session Initiation Protocol SIP call-handling functionality of Cisco IP Phone 6800, 7800, and 8800 Series Phones with Multiplatform Firmware could allow an unauthenticated, remote attacker to cause an affected phone to reload unexpectedly, resulting in a temporary denial of...
Cloud EC E-commerce system v1.2 suffers from SQL injection vulnerability (CNVD-2018-12322)
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system v1.2 exists SQL injection vulnerability. An attacker can exploit the vulnerability t...
Cloud EC E-commerce System v1.2 suffers from SQL Injection Vulnerability
Cloud EC e-commerce system hereinafter referred to as Cloud EC is a set of PHP + MYSQL-based open source e-commerce system software developed independently by Cloud MYSQL e-commerce Co. Cloud EC e-commerce system v1.2 exists SQL injection vulnerability. An attacker can exploit the vulnerability t...
Dell EMC RecoverPoint and RecoverPoint for Virtual Machines Information Disclosure Vulnerability
Dell EMC RecoverPoint and RecoverPoint for Virtual Machines are both products of Dell Dell. The former is a suite of disaster recovery and data protection software, and the latter is a disaster recovery solution for VMware environments. An information disclosure vulnerability exists in Dell EMC...
SkyCaiji Cross-Site Request Forgery Vulnerability
SkyCaiji is a set of PHP and MySQL based data collection software. A cross-site request forgery vulnerability exists in SkyCaiji version 1.2. A remote attacker can exploit this vulnerability to add an administrator user...
IBM BigFix Remote Control Spoofing Vulnerability
IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control version 9.1.2, which originates from the program allowing self-signed certificates. A remote attacker could exploit this vulnerability to conduc...
ABB MicroSCADA Installation Elevation of Privilege Vulnerability
ABB MicroSCADA is a suite of substation monitoring and control software from ABB Switzerland, developed specifically for power transmission and distribution systems. The software includes a human-machine interface MMI and flexible application engineering tools, and provides monitoring, event...
Brocade Fibre Channel SAN Product Brocade Fabric OS Cross-Site Scripting Vulnerability
Brocade Fibre Channel SAN products are all switch products of the American company Brocade Brocade, and Brocade Fabric OS FOS is a set of embedded systems running on them. A cross-site scripting vulnerability exists in the Web-based management interface of Brocade FOS versions prior to 7.4.2b,...
CVE-2017-13243
A information disclosure vulnerability in the Android system ui. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. ID: A-38258991...
CVE-2017-6227
A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS FOS versions before 7.4.2b, 8.1.2 and 8.2.0 could allow an attacker to cause a denial of service CPU consumption and device hang condition by sending crafted Router Advertisement RA messages to a...
Elasticsearch Kibana Cross-Site Scripting Vulnerability
Elasticsearch Kibana formerly known as elasticsearch-dashboard is a suite of open-source, browser-based analytics and search Elasticsearch dashboard tools from the Dutch company Elasticsearch. A cross-site scripting vulnerability exists in Elasticsearch Kibana versions 5.6.6 and 6.1.2, which stem...
CVE-2018-2594
Vulnerability in the Hyperion BI+ component of Oracle Hyperion subcomponent: Foundation UI & Servlets. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion BI+. Successful attacks...
CVE-2017-13185
An information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65123471...
CVE-2017-6138
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of...
CVE-2017-6133
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of service...
CVE-2017-13149
An information disclosure vulnerability in the Android media framework n/a. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-65719872...
CVE-2017-0880
A denial of service vulnerability in the Android media framework libskia. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID A-65646012...