2775 matches found
CVE-2018-3029
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...
CVE-2018-3038
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network...
CVE-2018-1255
RSA Identity Lifecycle and Governance versions 7.0.1, 7.0.2 and 7.1.0 contains a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to a...
F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-14718)
F5 BIG-IP ASM Application Security Manager is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A security vulnerability exists in F5 BIG-IP ASM versions 13.1.0...
CVE-2018-3756
Hyperledger Iroha versions v1.0beta and v1.0.0beta-1 are vulnerable to transaction and block signature verification bypass in the transaction and block validator allowing a single node to sign a transaction and/or block multiple times, each with a random nonce, and have other validating nodes...
EasyService Billing Cross-Site Request Forgery Vulnerability
EasyService Billing is a PHP-based service-oriented consumer business management system . A cross-site request forgery vulnerability exists in EasyService Billing version 1.0. A remote attacker can exploit this vulnerability to perform unauthorized operations with...
E-Sic Authentication Bypass Vulnerability
E-Sic is a Brazilian electronic system for citizen information. An authentication bypass vulnerability exists in the /index aka login URI in E-Sic version 1.0. An attacker can exploit this vulnerability to bypass authentication and gain access to the panel with the 'username' and 'password'...
clustercoding Blog Master Pro CSV Injection Vulnerability
clustercoding Blog Master Pro is a personal blog system based on Laravel framework. The system has a blog management , comment management and site configuration file management and other functions . A CSV injection vulnerability exists in clustercoding Blog Master Pro version 1.0. An attacker can...
CVE-2018-5517
On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to this issue. This issue impacts the data plane virtual servers and self IPs...
UBUNTU-CVE-2018-10537
An issue was discovered in WavPack 5.1.0 and earlier. The W64 parser component contains a vulnerability that allows writing to memory because ParseWave64HeaderConfig in wave64.c does not reject multiple format chunks...
PT-2018-9781 · Wuzhi · Wuzhi Cms
Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A CSRF issue allows deletion of any article via the "index.php?m=content&f=content&v=recycle delete" endpoint. Recommendations: For WUZHI CMS version 4.1.0, update to a newer version that contains a fix fo...
Zoho ManageEngine Desktop Central Cross-Site Scripting Vulnerability
ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A cross-site scriptin...
NASA Singledop Library Code Execution Vulnerability
NASA Singledop is a software module written in Python for retrieving low-level 2D wind fields from actual or simulated Doppler radar data.NASA Singledop library Weather data is one of the libraries. The NASA Singledop library in NASA Singledop version 1.0 suffers from a security vulnerability. A...
FreeXL Heap Buffer Out-of-Bounds Read Vulnerability
FreeXL is an open source library for extracting valid data from Excel .xls spreadsheets developed by software developer Alessandro Furieri. A heap buffer out-of-bounds read vulnerability exists in the 'readminibiffnextrecord' function in versions of FreeXL prior to 1.0.5. An attacker could exploi...
PT-2018-15507 · Sap · Sap Hana Extended Application Services
Name of the Vulnerable Software and Affected Versions: SAP HANA Extended Application Services version 1.0 Description: A controller user with SpaceAuditor authorization in a specific space could retrieve sensitive application data, such as service bindings, within that space. Recommendations: For...
IBM Tivoli Business Service Manager Cross-Site Scripting Vulnerability (CNVD-2018-02991)
IBM Tivoli Business Service Manager is a suite of enterprise-class business service management BSM solutions from IBM in the United States. The solution provides real-time service visibility and health indicators, multiple KPI historical time analysis and tracking, and more. A cross-site scriptin...
E.I Hi-Tech Professional Local Directory Script SQL Injection Vulnerability
E.I Hi-Tech Professional Local Directory Script is a set of PHP and MySQL based scripts for creating local directories from E.I Hi-Tech Technolgies, USA. A SQL injection vulnerability exists in version 1.0 of E.I Hi-Tech Professional Local Directory Script. A remote attacker can create a local...
CVE-2016-0207
IBM Algorithmics One-Algo Risk Application ARA 4.9.1 through 5.1.0 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors. IBM X-Force ID: 109399...
Microsoft ASP.NET Core Cross-Site Request Forgery Vulnerability
Microsoft ASP.NET Core is a cross-platform open source framework from Microsoft Corporation USA. The framework is used to build cloud-based applications such as web applications, IoT applications, and mobile backends. A cross-site request forgery vulnerability exists in Microsoft ASP.NET Core...