2784 matches found
CVE-2017-17110
Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request...
Heimdal denial of service vulnerability
Heimdal is a Kerberos 5 implementation. A security vulnerability exists in Heimdal version 7.1.0. A remote attacker can exploit this vulnerability by sending specially crafted UDP packets to cause a denial of service crash, null pointer backreference, and segmentation error...
Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2017-37109)
Microsoft .NET Core is a free open source development platform from Microsoft USA. The platform features multi-language support and cross-platform. A denial of service vulnerability exists in Microsoft .NET Core versions 1.0, 1.1, and 2.0 due to the program failing to properly parse certificate...
SAP HANA Extended Application Services Security Bypass Vulnerability
SAP HANA is a high-performance real-time data analytics platform from SAP, which provides data query functions that allow users to directly query and analyze a large amount of real-time business data.Extended Application Services XS is a development environment for application servers, Web server...
Unspecified Vulnerability in Apple iOS and macOS Sierra 802.1X
Apple iOS and macOS Sierra are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS Sierra is a specialized operating system developed for Mac computers. 802.1X is one of the Client or Server-based access control and authentication protocol components. A...
YxtCMF v3.1.0 SQL Injection Vulnerability in Frontend ShitiController.class.php Page
YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. YxtCMF v3.1.0 has a SQL injection vulnerability in the frontend ShitiController.class.php page. An attacker can exploit this vulnerability to obtain sensitive...
MyBuilder Clone SQL Injection Vulnerability
MyBuilder Clone is an e-commerce website building system. A SQL injection vulnerability exists in MyBuilder Clone version 1.0. A remote attacker can exploit this vulnerability by sending the 'subcategory' parameter to the phpsqlsearchgenxml.php file to inject SQL commands...
E-Sic Software livre CMS 'q' Parameter SQL Injection Vulnerability
E-Sic is a Brazilian electronic system for citizen information. A SQL injection vulnerability exists in E-Sic version 1.0. A remote attacker can exploit the vulnerability by sending the 'q' parameter to the file esiclivre/restrito/inc/lkpcep.php to execute arbitrary SQL commands...
PT-2017-14114 · Abb · Abb Fox515T
Name of the Vulnerable Software and Affected Versions: ABB Fox515T version 1.0 Description: The embedded web server is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use as a template. The filename is not validated, allowing an attacker to...
Zyxel NBG6716 ozkerz component command injection vulnerability
The Zyxel NBG6716 is a wireless router product from Hopkin ZyXEL Technologies. ozkerz component is one of the components. A security vulnerability exists in the ozkerz component of the Zyxel NBG6716 V1.00AAKG.9C0 version, which originates from the program's direct use of beginIndex and endIndex i...
LAVA Computer MFG Ether-Serial Link Authentication Bypass Vulnerability
Ether-Serial Link is an Ethernet serial link device from LAVA Computer MFG. An authentication bypass vulnerability exists in LAVA Computer MFG Ether-Serial Link versions 6.01.00/29.03.2007 and earlier, which can be exploited by an attacker with the same IP address to bypass authentication by...
EyesOfNetwork web interface SQL injection vulnerability (CNVD-2017-33830)
EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides business process configuration tools, generating pop-up windows when events occur in the active queue, etc. EyesOfNetwork web interface aka eonweb is one of the web interfaces. A SQL injection vulnerability...
Oracle PeopleSoft Enterprise PRTL Interaction Hub Unauthorized Operation Vulnerability (CNVD-2017-28378)
Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PRTL Interaction Hub is one of the enterprise and Customer Interaction...
CVE-2017-10070
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: Maintenance Folders. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2017-10091
Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control subcomponent: UI Framework. Supported versions that are affected are 12.1.0, 13.1.0 and 13.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
UBUNTU-CVE-2015-5244
The NSSCipherSuite option with ciphersuites enabled in modnss before 1.0.12 allows remote attackers to bypass application restrictions...
Joomla! JoomRecipe Component SQL Injection Vulnerability
Joomla! is a content management system. A SQL injection vulnerability exists in version 1.0.4 of the JoomRecipe component of Joomla! The vulnerability allows attackers to obtain sensitive database information...
CVE-2017-2273
Cross-site request forgery CSRF vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
BUFFALO WAPM-1166D and WAPM-APG600H Cross-Site Request Forgery Vulnerabilities
The BUFFALO WAPM-1166D and WAPM-APG600H are both wireless LAN access point devices from BUFFALO Japan. A cross-site request forgery vulnerability exists in the WMR-433 using firmware version 1.02 and earlier and the WMR-433W using firmware version 1.40 and earlier. A remote attacker could exploit...