10782 matches found
Crypto++ Information Disclosure Vulnerability
Crypto++ aka cryptopp is a free C++ library. A security vulnerability exists in Crypto++ 5.6.4 and earlier versions, which can be exploited by an attacker to obtain sensitive information by accessing process memory...
Bitdefender Antivirus Plus avc3 Kernel Driver Elevation of Privilege Vulnerability
Bitdefender Antivirus Plus is an antivirus plugin. Bitdefender Antivirus Plus suffers from a security vulnerability in the avc3 kernel driver handling IOCTL 0x002222f4. An attacker could exploit this vulnerability to execute arbitrary code on the target system...
Bitdefender Antivirus Plus bdfwfpf Elevation of Privilege Vulnerability
Bitdefender Antivirus Plus is an antivirus plugin. Bitdefender Antivirus Plus has a security vulnerability in bdfwfpf processing 0x8000e038 IOCTL. An attacker could exploit this vulnerability to elevate its privileges on the target system...
Cisco Small Business 220 Series Smart Plus Switches Denial of Service Vulnerability
Cisco Small Business 220 Series Smart Plus Switches is a 220 Series stackable managed switch product from Cisco USA. A denial of service vulnerability exists in Cisco Small Business 220 Series Smart Plus Switches. An attacker could exploit this vulnerability to cause a denial of service...
Cisco Small Business 220 Series Smart Plus Switches Unauthorized Access Vulnerability
Cisco Small Business 220 Series Smart Plus Switches is a 220 Series stackable managed switch product from Cisco USA. An unauthorized access vulnerability exists in Cisco Small Business 220 Series Smart Plus Switches. An attacker could exploit this vulnerability to gain unauthorized access to an...
Cisco Small Business 220 Series Smart Plus Switches Cross-Site Scripting Vulnerability
The Cisco Small Business 220 Series Smart Plus Switches are smart switches. Cisco Small Business 220 Series Smart Plus Switches cross-site scripting vulnerability that fails to properly validate user-submitted inputs allows an attacker to exploit the vulnerability to execute arbitrary code in the...
Bitdefender Antivirus Plus avc3 Kernel Driver Untrusted Pointer Dereference Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Bitdefender Antivirus Plus. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
Cisco Small Business 220 Series Smart Plus Switches Web Interface Cross-Site Request Forgery Vulnerability
A vulnerability in the web-based management interface of Cisco Small Business 220 Series Smart Plus Sx220 Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack and perform arbitrary actions on an affected device. The vulnerability is due to...
Cisco Small Business 220 Series Smart Plus Switches Web Interface Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Small Business 220 Series Smart Plus Sx220 Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. The...
Toshiba Coordinate Plus App for Android and iOS Security Bypass Vulnerability
Toshiba Coordinate Plus App for Android and iOS is a suite of virtual assembly applications for Android and iOS from Toshiba, Japan. A security bypass vulnerability exists in Toshiba Coordinate Plus App for Android and iOS versions 1.0.2 and earlier. An attacker could exploit the vulnerability to...
WordPress Store Locator Plus 4.5.09 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting in Store Locator Plus for WordPress ------------------------------------------------------------------------ Yorick Koster, July 2016...
Store Locator Plus for WordPress <= 4.5.10 - Authenticated Cross-Site Scripting (XSS)
The Store Locator Plus® for WordPress WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
Coordinate Plus App fails to verify SSL server certificates
Overview Coordinate Plus App provided by Toshiba Corporation fails to verify SSL server certificates. Gaku Taniguchi of RiskFinder,inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A man-in-the-middle...
International Components for Unicode/C++ Denial of Service Vulnerability
International Components for Unicode ICU is a set of libraries for the C/C++ and Java programming languages to manipulate Unicode data, and an open source project to support the internationalization of software. The 'ulocacceptLanguageFromHTTP' function in the common/uloc.cpp file of Internationa...
Misys FusionCapital Opics Plus SQL Injection Vulnerability
Misys FusionCapital Opics Plus is an end-to-end scalable money business solution for the financial industry from Misys UK. The solution provides IAS-compliant accounting structures, foreign exchange tools and client-facing e-banking capabilities. An SQL injection vulnerability exists in Misys...
Misys FusionCapital Opics Plus Elevation of Privilege Vulnerability
Misys FusionCapital Opics Plus is an end-to-end scalable money business solution for the financial industry from Misys UK. The solution provides IAS-compliant accounting structures, foreign exchange tools and client-facing e-banking capabilities. A security vulnerability exists in Misys...
CVE-2016-5655
Misys FusionCapital Opics Plus does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate...
CVE-2016-5654
Misys FusionCapital Opics Plus allows remote authenticated users to gain privileges via a man-in-the-middle attack that modifies the xmlMessageOut parameter...
