164 matches found
Microstrategy Analytics Cross-Site Request Forgery Vulnerability
Microstrategy Analytics is a suite of enterprise data analytics platforms from Microstrategy, Inc. in the United States. The platform features data discovery, data visualization and report generation. A cross-site request forgery vulnerability exists in the main.aspx file in Microstrategy Analyti...
Unspecified Vulnerability in Oracle Database Server (CNVD-2018-24128)
Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in the Text component of Oracle Database Server version...
Design/Logic Flaw
HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager eIUM v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM...
HPESBHF03887 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Arbitrary File Modification
Potential Security Impact: Remote: Arbitrary File Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC Plat 7.3 E0506P09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7102 |...
The vulnerability of the embedded web-server software module of the APC MGE SNMP/Web Card Transverse 66074 allows a intruder to modify the device’s settings.
The vulnerability of the embedded web-server-based microprogramming software module for managing uninterruptible power supplies, the APC MGE SNMP/Web Card Transverse 66074, is caused by authentication errors. Exploiting this vulnerability could allow a malicious actor to remotely alter device...
CVE-2018-7308
A CSRF issue was found in var/www/html/files.php in DanWin hosting through 2018-02-11 that allows arbitrary remote users to add/delete/modify any files in any hosting account...
CVE-2017-5108
Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file...
CVE-2017-5108
Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file...
CVE-2017-5094
Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page...
UBUNTU-CVE-2017-5108
Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted PDF file...
chromium-browser: type confusion in extensions
Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentially maliciously modify objects via a crafted HTML page...
Easy File Sharing FTP Server Directory Traversal Vulnerability
EFS Software Easy File Sharing FTP Server is an easy-to-use and powerful FTP Server software from EFS Software, Netherlands. A directory traversal vulnerability exists in Easy File Sharing FTP Server, which stems from a failure to adequately validate user input. A remote attacker could utilize a...
CVE-2016-8328
Vulnerability in the Java SE component of Oracle Java SE subcomponent: Java Mission Control. The supported version that is affected is Java SE: 8u112. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful...
CVE-2016-3188
The prepopulaterequestwalk function in the Prepopulate module 7.x-2.x before 7.x-2.1 for Drupal allows remote attackers to modify the 1 actions, 2 container, 3 token, 4 password, 5 passwordconfirm, 6 textformat, or 7 markup field type, and consequently have unspecified impact, via unspecified...
Design/Logic Flaw
EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unspecified vectors...
The software of the Advantech WebAccess remote monitoring system is vulnerable, allowing a intruder to modify files of any type.
The vulnerability of Advantech WebAccess remote monitoring software lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to modify files of any type remotely...
Unspecified Vulnerability in Oracle E-Business Suite Oracle Applications Manager Oracle Diagnostics Interfaces Component
Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Applications Manager Oracle Diagnostics Interfaces component, which could be exploited by remote attackers to submit a special request to...
The vulnerability of the Enterprise Manager Grid Control software allows a hacker to modify data.
The vulnerability of the Enterprise Manager Ops Center component of the Enterprise Manager Grid Control system is related to errors in the code. Exploiting this vulnerability allows a malicious actor to remotely modify data...
The vulnerability of the MySQL database management system allows a hacker to modify data.
The vulnerability of the Server sub-component in the Security section relates to errors in the code of the MySQL database management system. Exploiting this vulnerability allows a malicious actor to remotely modify data...