CVE-2018-1543

IBM WebSphere MQ 8.0 and 9.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate the SSL certificate. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 142598...

JDK: unspecified vulnerability fixed in 6u191, 7u171, and 8u161 (Security)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with...

The vulnerability of the Cisco Wide Area Application Services Software (WAAS) SNMP daemon allows a hacker to read any data available on the device through the SNMP protocol.

The vulnerability of the Cisco WAAS software package related to the use of pre-installed credentials. Exploiting this vulnerability allows a remote attacker to read any data available on the device through the SNMPv2c protocol...

Cisco Wide Area Application Services Software Static SNMP Credentials Vulnerability

Cisco Wide Area Application Services WAAS Software is the United States Cisco Cisco company's set of WAN link acceleration software. The software is mainly used for small bandwidth and high latency link environment. A security vulnerability in the default configuration of the Simple Network...

Adobe ColdFusion Cross-Site Scripting Vulnerability (CNVD-2018-10345)

Adobe ColdFusion is the United States of America Audobee Adobe a dynamic Web server products, which runs the CFML ColdFusion Markup Language is a programming language for Web applications. A cross-site scripting vulnerability exists in Adobe ColdFusion released in 2016 Update 5 and earlier versio...

Foxit Reader Information Disclosure Vulnerability (CNVD-2018-11857)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An out-of-bounds read vulnerability exists in the U3D Texture Resource framework handling in Foxit Reader version 9.0.0.29935, where the program fails to properly validate user-submitted data. The vulnerability can b...

CVE-2018-9983

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-9950

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10481

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10475

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2018-10476

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Mitel MiVoice Connect SQL Injection Vulnerability

Mitel MiVoice Connect R1707-PREM and Mitel ST are both products of Mitel Corporation of Canada.Mitel MiVoice Connect R1707-PREM is a Unified Communications Management Appliance.ST is a videoconferencing product.conferencing is one of the notification components. conferencing is one of the...

CVE-2018-6093

Insufficient origin checks in Blink in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

PT-2018-3620 · Gnu +7 · Gnu Binutils +7

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.30 Description: The issue allows attackers to cause a denial of service or possibly have other impacts, as demonstrated by an out-of-bounds write of 8 bytes during the execution of objdump. This can occur due to a...

Vulnerability of the Server:Security:Privileges component of the MySQL database management system, which allows a hacker to cause a service failure

The vulnerability of the Server:Security:Privileges component of the MySQL database management system is related to security configuration errors. Exploiting this vulnerability may allow a malicious actor to cause service interruptions by modifying system data remotely...

Vulnerability of the Server:Replication component of the MySQL database management system, which allows a hacker to modify, add, or delete MySQL data, or cause service interruptions.

The vulnerability of the Server:Replication component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to remotely modify, add, or delete MySQL data, or cause service failures...

UBUNTU-CVE-2018-0489

Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digital signatures of user data, which allows remote attackers to obtain sensitive information or conduct impersonation attacks via crafted XML data. NOTE: this...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-03516)

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Edge is one of the default browsers that comes with the system. An information...

CVE-2018-5319

RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request...

CVE-2017-16591

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of NetGain Systems Enterprise Manager 7.2.699 build 1001. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific...