SQL Injection Vulnerability in TouchPoint Media's Website Construction System

SQL Injection Vulnerability in TouchPoint Media's Website Construction System A SQL injection vulnerability exists in Contact Media's website construction system, which can be exploited by attackers to remotely execute malicious sql statements and obtain sensitive information...

Unspecified Vulnerability in Oracle JD Edwards Products JD Edwards EnterpriseOne Tools Component

Oracle JD Edwards Products is a fully integrated suite of Enterprise Resource Planning ERP applications from Oracle, providing financial management, project management, and asset lifecycle management applications.JD Edwards EnterpriseOne Tools is one of the tool components. A security vulnerabili...

FFmpeg 'mov_read_default' function integer overflow vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. An integer overflow vulnerability exists in the 'movreaddefault' function in the libavformat/mov.c file in FFmpeg versions prior to 2.4.6. A remote attacker can exploit this vulnerability t...

CVE-2017-1670

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 133637...

CVE-2017-16574

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-14819

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

CVE-2017-16588

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

Trend Micro Mobile Security Information Disclosure Vulnerability

Trend Micro Mobile Security is a mobile security solution. Trend Micro Mobile Security addresses an information disclosure vulnerability in cltreportsmsstatus, which allows remote attackers to exploit the vulnerability by submitting a special request to obtain sensitive information...

CloudBees Jenkins Favorite plugin cross-site request forgery vulnerability

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and a number of timed tasks . Favorite Plugin is one...

The vulnerability of the Media Framework component of the Android operating system, which allows a hacker to disclose confidential information

The vulnerability of the Media Framework component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose confidential information remotely...

Libpcap Design Vulnerabilities

libpcap is a C library for network packet capture. A security vulnerability exists in the pcap-linux.c file in version 1.1.1 prior to libpcap commit ea9432fabdf4b33cbc76d9437200e028f1c47c93. A remote attacker can exploit this vulnerability to send arbitrary data with the help of specially crafted...

OpenText Document Sciences xPression SQL Injection Vulnerability (CNVD-2017-33295)

OpenText Document Sciences xPression formerly known as EMC Document Sciences xPression is a document output management and customer communication solution from OpenText Canada. The solution integrates an organization's Customer Relationship Management CRM, Enterprise Content Management ECM, and...

OpenText Document Sciences xPression SQL Injection Vulnerability

OpenText Document Sciences xPression formerly known as EMC Document Sciences xPression is a suite of document output management and customer communication solutions from OpenText Canada. A SQL injection vulnerability exists in OpenText Document Sciences xPression version 4.5SP1 Patch 13. A remote...

CVE-2017-13068

QNAP has already patched this vulnerability. This security concern allows a remote attacker to perform an SQL injection on the application and obtain Helpdesk application information. A remote attacker does not require any privileges to successfully execute this attack...

CVE-2017-14935

Pulse Secure Pulse One On-Premise 2.0.1649 and below does not properly validate requests, which allows remote users to query and obtain sensitive information...

Fedora pure-ftpd misconfiguration vulnerability

Fedora is a Linux-based operating system developed by the Fedora Project community and sponsored by Red Hat. pure-ftpd is one of the FTP service programs. A misconfiguration vulnerability exists in Downstream version 1.0.46-1 of pure-ftpd in Fedora. A remote attacker could exploit this...

Webservice Gateway Directory Traversal Vulnerability in Multiple EMC Products

EMC ViPR SRM and others are products of EMC Corporation.EMC ViPR SRM is a suite of storage resource management software.Storage M&R is a data storage collector.Webservice Gateway is one of the gateways. A directory traversal vulnerability exists in Webservice Gateway in multiple EMC products. A...

CVE-2017-9458

XML external entity XXE vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to obtain sensitive information, cause a denial of service, or...

IBM QRadar Network Security XML External Entity Injection Vulnerability

IBM QRadar Network Security is a suite of network threat protection software from IBM in the United States. The software uses deep packet inspection and behavior-based analysis to detect and protect against known and unknown threats. An XML external entity injection vulnerability exists in IBM...

Oracle Java Advanced Management Console Unauthorized Read Vulnerability

Oracle Java SE is Oracle's suite of standard edition Java platforms for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. java Advanced Management Console is one of the Java Advanced Management Console components for creating...