EMC RSA Web Threat Detection Cross-Site Scripting Vulnerability

EMC RSA Web Threat Detection is a suite of Web threat detection software from EMC Corporation. The software is used to collect and analyze real-time data from web traffic to provide intelligent real-time analysis of web sessions and user behavior. A cross-site scripting vulnerability exists in EM...

CVE-2017-3412

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2017-00994)

Oracle E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation.Oracle Leads Management is one of the components that provides solutions to automate and optimize an organization's sales prospecting. A remote vulnerability exists in the Oracle Lea...

VX Search Enterprise Buffer Overflow Vulnerability

VX Search Enterprise is a utility software that can search your computer files. A buffer overflow vulnerability exists in VX Search Enterprise version 9.1.12, which can be exploited by an attacker to execute arbitrary code in the context of an affected application, potentially resulting in a deni...

IBM BigFix Remote Control Encryption Issue Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions, which stems from the program's use of weak encryption. The vulnerability can be exploited by an attacker to compromi...

IBM BigFix Remote Controll Local Information Disclosure Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A local attacker could exploit the vulnerability to discover hard-coded credentials...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11868)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions, which stems from the program failing to properly set account lockout. A remote attacker can exploit this vulnerabili...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11814)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A security vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A remote attacker could exploit the vulnerability by sniffing the network to obtain sensitive information...

IBM BigFix Remote Control Information Disclosure Vulnerability (CNVD-2016-11860)

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. An information disclosure vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. A remote attacker can exploit this vulnerability by sending a specially crafted POST request to obtai...

Apache OpenOffice Unreferenced Windows Search Path Vulnerability

Apache OpenOffice OOo is an open source office software suite from the U.S. Apache Apache Software Foundation. The suite contains text documents, spreadsheets, presentations, drawings, databases and so on. A non-referenced Windows search path vulnerability exists in Apache OOo 4.1.2 and earlier...

CVE-2016-7391

creationtimestamp| type| source ---|---|--- 2016-10-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40661...

TLS SHA-1 Spoofing Attack Vulnerability

TLS full name Transport Layer Security is a set of protocols used to provide confidentiality and data integrity between two communicating applications. A security vulnerability exists in SHA-1 in TLS version 1.2. This vulnerability can be exploited by an attacker to perform spoofing attacks...

CVE-2016-1000135

Reflected XSS in wordpress plugin hdw-tube v1.2...

Shiro RememberMe Deserialization Command Execution Vulnerability

Apache Shiro is the top project of the Apache Software Foundation, the preferred authorization verification, authorization, cryptography, and session management framework in Java applications. The JIRA for Apache Shiro mentions a security vulnerability in cookie management in Shrio. Under the rig...

Multiple Apple Products WebKit Homologation Policy Bypass Vulnerability

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

Multiple Apple Products WebKit Denial of Service Vulnerability

Apple iOS, Safari, and tvOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; and tvOS is an operating system for smart TVs. webKit is an open source web...

Unspecified Vulnerability in Oracle E-Business Suite Marketing

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3 contain a security vulnerability in the Marketing component, which can be exploited by remote attackers to compromise confidentiality, integrity...

CVE-2016-0229

Cross-site scripting XSS vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

libarchive mtree parse_device function stack buffer overflow vulnerability

libarchive is a multi-format archive and compression library. A stack buffer overflow vulnerability exists in the mtree parsedevice function in libarchive version 3.1.2. An attacker can exploit this vulnerability with a specially crafted mtree file to cause a denial of service memory corruption, ...

IBM Marketing Platform Cross-Site Scripting Vulnerability

IBM Marketing Platform is a suite of marketing platforms from IBM in the United States. The platform supports marketers in leveraging and analyzing customer interactions on websites, cell phones and social media to deliver targeted marketing campaigns to customers. A cross-site scripting...