CVE-2018-7110

A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework SGF version 4.2, 4.3. A race condition under high load in SGF exists where SGF transferred different parameter to the enabler...

CVE-2018-13821

A lack of authentication, in CA Unified Infrastructure Management 8.5.1, 8.5, and 8.4.7, allows remote attackers to conduct a variety of attacks, including file reading/writing...

HPE 3PAR Service Processor Cross-Site Request Forgery Vulnerability

HPE 3PAR Service Processor SP is a suite of virtual service processors deployed on the VMware vSphere hypervisor from Hewlett Packard Enterprise HPE, USA. A cross-site request forgery vulnerability exists in versions prior to HPE 3PAR SP SP-4.4.0.GA-110 MU7. A remote attacker could exploit this...

The vulnerability of the InnoDB component of the MySQL database management system allows a hacker to gain unauthorized access to protected data or cause service failures.

The vulnerability of the InnoDB component of the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected data and cause network protocol-related service failure...

CVE-2018-11636

Cross-site request forgery CSRF vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to execute malicious and unauthorized actions...

Synology Photo Station Cross-Site Request Forgery Vulnerability

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A cross-site request forgery vulnerability exists in the admin/user.php file in Synology Photo Station versions prior to 6.8.5-3471 and prior to 6.3-2975. A remote attacker can exploit the...

Cisco Linksys EA4500 Cross-Site Request Forgery Vulnerability

The Cisco Linksys EA4500 devices is a router device from Cisco USA. A cross-site request forgery vulnerability exists in Cisco Linksys EA4500 devices using firmware versions prior to 2.1.41.164606. A remote attacker could exploit this vulnerability to perform unauthorized operations...

Schneider Electric MGE UPS and MGE STS 66074 MGE Network Management Card Transverse Improper Authorization Vulnerability

The Schneider Electric MGE UPS and MGE STS are both products of the French company Schneider Electric.The Schneider Electric MGE UPS is an uninterruptible power supply unit.The MGE STS is a static toggle switch.66074 MGE Network Management Card Transverse is one of the network management cards...

HPESBUX03817 rev.2 - HP-UX CIFS Server, Local and Remote Vulnerabilities

Potential Security Impact: Local: Unauthorized Data Access; Remote: Disclosure of Information, Unauthorized Data Access, Unauthorized Modification Of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX Common Internet File System CIFS, Client/Server Software...

CVE-2017-5801

A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found...

Information disclosure

A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Federation Agent version 3.0 was found...

CVE-2017-5801

CVE-2017-5801 is described across sources as a vulnerability in HPE Business Process Monitor (BPM) affecting v09.2x and v09.30, with indications of remote code execution/unauthorized data access. The connected documents cite an RCE/unauthorized access vector in BPM, but do not provide concrete te...

CVE-2017-8945

CVE-2017-8945 concerns HPE IceWall Federation Agent v3.0 with a remote unauthorized information disclosure vulnerability. The CNVD entry describes an information disclosure issue that could enable a remote attacker to redirect users to an arbitrary website and conduct a phishing attack. Details a...

CVE-2017-8978

A Remote Unauthorized Disclosure of Information vulnerability in HPE IceWall Products version MFA 4.0 proxy was found...

Micro Focus Project and Portfolio Management Center Cross-Site Request Forgery Vulnerability

Micro Focus Project and Portfolio Management Center is a suite of project portfolio management software from Micro Focus UK. The software manages hybrid projects by integrating agile tools such as ALM Octane, Agile Manager and CA Rally. A cross-site request forgery vulnerability exists in Micro...

phpMyFAQ cross-site request forgery vulnerability (CNVD-2017-32428)

phpMyFAQ is phpMyFAQ team developed a set of open source fully database-driven FAQ question and answer system . The system supports multiple languages, multiple databases, etc., and includes modules such as content management system and community. A cross-site request forgery vulnerability exists...

The vulnerability of Kaspersky Internet Security for Android’s antivirus protection lies in its lack of access control mechanisms, allowing unauthorized users to gain unauthorized access to the product’s functions.

The vulnerability of Kaspersky Internet Security for Android relates to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the functions of this product through the Android inter-process communication...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26834)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. An input validation vulnerability exists in the USIM response handling process of the...

Exiv2 Denial of Service Vulnerability (CNVD-2017-27705)

Exiv2 is a set of C++ libraries and command line applications for managing image metadata developed by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in EXIF, IPTC and XMP formats. libexiv2 is one of the core libraries. A denial of service...

Hawtio Cross-Site Request Forgery Vulnerability

Hawtio is a Web console for managing Java frameworks. A cross-site request forgery vulnerability exists in Hawtio. A remote attacker could exploit this vulnerability to perform unauthorized operations...