SQL Injection Vulnerability in 'name' Parameter of Single Point CRM System

Single point CRM system is a single point of technology development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies , fixed...

CVE-2016-7664

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component. which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging the availability of excessive options during lockscreen...

Cisco Intrusion Prevention System Device Manager Information Leakage Vulnerability

Cisco Intrusion Prevention System is an intrusion prevention system. A remote information leakage vulnerability exists in Cisco Intrusion Prevention System Device Manager. An attacker could exploit this vulnerability to obtain sensitive information and launch further attacks...

OpenSSL Information Disclosure Vulnerability (CNVD-2017-01531)

OpenSSL is an open source capable of implementing the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols developed by the OpenSSL team as a general-purpose cryptographic library that supports a wide range of cryptographic algorithms including symmetric ciphers, hash...

Jenkins Information Disclosure Vulnerability (CNVD-2017-01369)

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . An...

Google Android AOSP Mail Information Disclosure Vulnerability (CNVD-2017-01556)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Google Android AOSP Mail. Attackers use this vulnerability to obtain sensitive information and launch further attacks...

Information disclosure

An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1,...

CVE-2016-8460

An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions...

CVE-2017-0397

An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Androi...

CVE-2016-8460

CVE-2016-8460 : An information disclosure in the NVIDIA Tegra kernel driver (NVMAP) could leak uninitialized stack memory to a local user, enabling data exposure. Affected: Android on Kernel-3.10 (Nexus 9 cited). Impact per sources: information disclosure; CVSS v3 base 5.5 (medium). Remediation: ...

ImageMagick Information Disclosure Vulnerability

ImageMagick is a free software for creating, editing, and compositing images.The use of most of ImageMagick's features comes from the command line tools. ImageMagick suffers from an information disclosure vulnerability. An attacker could exploit this vulnerability to access sensitive information...

PIMS order management system controller\buy.php has SQL injection vulnerability

PIMS is an online order management system for subscription-based websites. An SQL injection vulnerability exists in controller\buy.php of the PIMS order management system. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in the uuid Parameter of Shenzhen Siquan CRM System

Ltd. is engaged in OA, CRM, ERP, HRM, enterprise mailbox system consulting and services. SQL injection vulnerability exists in the uuid parameter of the Shenzhen SiQuan CRM system. Allows attackers to exploit the vulnerability to obtain sensitive database information...

Command Injection Vulnerability in Huawei FusionAccess

Huawei FusionAccess is a desktop management system for Huawei's FusionCloud desktop cloud solution from Huawei, China. The system distributes, maintains, and recycles virtual desktops for users through a graphical Portal interface. A command injection vulnerability exists in Huawei FusionAccess...

Google Android Qualcomm Component Information Disclosure Vulnerability (CNVD-2016-11052)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An information disclosure vulnerability exists in the Google Android Qualcomm component. An attacke...

Trend Micro Local Elevation of Privilege Vulnerability

Trend Micro InterScan Messaging Security Virtual Appliance IMSA is an email gateway security appliance from Trend Micro that integrates anti-virus, anti-spyware and anti-phishing technologies to provide comprehensive protection for email applications. A local elevation of privilege vulnerability...

ManageEngine ServiceDesk Plus 9.2 Build 9207 Information Disclosure

Title: ManageEngine ServiceDesk Plus Low Privileged User View All Tickets Date: 18 October 2016 Author: p0z Vendor: ManageEngine Vendor Homepage: https://www.manageengine.com/ Product: ServiceDesk Plus Version: 9.2 Build 9207 Other versions could also be affected Fixed Version: 9.2 Build 9228...

SQL Injection Vulnerability in bjbh Parameter of EAP Digital Campus Integration Management Platform of Guangzhou Zhongda Dongri Education Technology Co.

EAP platform, abbreviated as EAP Enterprise Application Platform, enterprise application platform, also known as enterprise management software platform, is a highly open, integrated with a number of enterprise management software modules. Guangzhou CUHK Dongri Education Technology Co., Ltd. EAP...

SQL Injection Vulnerability in Driver's Home Vehicle Information System of Shandong Guoan Information Industry Co.

Ltd. is subordinate to CITIC Guoan Information Industry Co., Ltd. and is an independent legal person enterprise formally registered in October 1997 in Shandong Province Administration for Industry and Commerce. A SQL injection vulnerability exists in the Driver's Home Vehicle Information System o...

PT-2016-22: XML External Entity Injection in SAP NetWeaver

The specialists of the Positive Research center have detected an XML External Entity Injection vulnerability in SAP NetWeaver. Vulnerability in the GPL hidden content validation component allows attackers to obtain sensitive information or cause a denial of service using a specially crafted XML...