IBM InfoSphere Information Server XML External Entity Injection Vulnerability

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. An XML external entity injection vulnerability exists in IBM InfoSphere Information Server versions 9.1,...

Oracle Application Management Pack for Oracle E-Business Suite Remote Vulnerability

Oracle E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation.Application Management Pack AMP for Oracle E-Business Suite is one of the extensions of the Application Management Pack AMP for Oracle E-Business Suite is one of the application...

Niushop open source mall system has multiple SQL injection vulnerabilities

NiuShop open source mall system , is by the Shanxi Niu Cool Information Technology Co., Ltd. completely independent design , research and development of a PHP open source e-commerce system . NiuShop open source mall system collectionGoodsOrShopt, cancelCollGoodsOrShop, platformAdvList,...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise FSCM

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise FSCM is one of the financial and supply chain management components. A...

Unspecified Vulnerability in Oracle Business Intelligence Enterprise Edition

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other functionality.Oracle Business Intelligence Enterprise Edition is one of the business intelligence...

Oracle FLEXCUBE Private Banking Unauthorized Read Vulnerability

Oracle Financial Services Applications is a set of core banking, online banking and property management financial services software from Oracle Corporation, of which Oracle FLEXCUBE Private Banking is a private banking component. A security vulnerability exists in the Miscellaneous subcomponent o...

Apple macOS Sierra Audio memory corruption vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple Inc. for Mac computers.The audio component is one of the audio components. A memory corruption vulnerability exists in the Audio component of Apple macOS Sierra before 10.12.6. A remote attacker can exploit this vulnerability...

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone technology’s authentication mode for Qualcomm Secure Execution Environment for Android, as found in the CAF repository, stems from synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker operating remotely to...

The vulnerability of the Oracle MySQL database management system allows a hacker to modify data.

The vulnerability of the MySQL Server component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to remotely gain access to modify, add, or delete data using network packets...

Schneider Electric homeLYnk Controller Security Bypass Vulnerability

The Schneider Electric homeLYnk Controller is a logic controller. A security bypass vulnerability exists in all versions of the Schneider Electric homeLYnk Controller prior to 1.5.0. A remote attacker could exploit this vulnerability to obtain sensitive information...

CVE-2016-1178

The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors...

Google Android Qualcomm SPMI driver information disclosure vulnerability

Google Android is a mobile operating system based on the Linux open kernel. Google Android suffers from an information disclosure vulnerability in the Qualcomm SPMI driver implementation, which allows remote attackers to exploit the vulnerability by submitting a special application that can acces...

Apple iOS/tvOS/macOS/watchOS Information Disclosure Vulnerability

iOS is a mobile operating system developed by Apple Inc. First announced at the Macworld conference on January 9, 2007, it was originally designed for use with the iPhone, and has since been applied to the iPod touch, iPad, and Apple TV. tvOS is an Apple-developed system based on iOS. tvOS is the...

swagger-ui: cross-site scripting in key names

It was found that swagger-ui contains a cross site scripting XSS vulnerability in the key names in the JSON document. An attacker could use this flaw to supply a key name with script tags which could cause arbitrary code execution. Additionally it is possible to load the arbitrary JSON files...

CVE-2017-2450

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "CoreText" component. It allows remote attackers to obtain sensitive information or cause a denial...

DEBIAN-CVE-2017-2447

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information or cause a denial of service memory corruption via a...

The vulnerability of the Android operating system, which allows a hacker to delete user data

The vulnerability of the Wi-Fi component of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to delete user data remotely...

PT-2017-1654 · Microsoft · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: The issue is related to a lack of protection for internal data. It may allow a remote attacker to obtain confidential information from the process memory, cause a denial of servic...

DEBIAN-CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

CVE-2017-3836

A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. More Information: CSCvb61689. Known Affected Releases: 11.51.11007.2. Known Fixed Releases: 12.00.98000.162 12.00.98000.178 12.00.98000.383...