Unauthorized Vulnerability in Guotai Newpoint Software E-Government System

Jiangsu Guotai New Point Software Co., Ltd. is as a total solution provider of information technology, focusing on the fields of intelligent government, intelligent transaction, intelligent city park, construction industry and so on. An unauthorized vulnerability exists in the e-government system...

Samsung KNOX Weak Encryption Vulnerability

Samsung KNOX is a set of enterprise mobile security solutions based on the Android platform from Samsung South Korea. The program offers features such as device protection, management and development options. A security vulnerability exists in version 1.0 of Samsung KNOX on the Android 4.3-based...

Arbitrary User Login Vulnerability in Xiaowei OA System of Beijing Xiaowei Help Technology Co.

Xiaowei OA system is Beijing Xiaowei Help Technology Co., Ltd. to provide mobile office platform for small and medium-sized enterprises. There is an arbitrary user login vulnerability in the Xiaowei OA system that allows attackers to arbitrarily register users to log in to the system and obtain...

IBM WebSphere Portal Information Disclosure Vulnerability (CNVD-2015-08436)

IBM WebSphere Portal is a solution that creates a platform that connects the internal and external parts of an organization, through which employees, customers, vendors, etc. can access data within the organization. A security vulnerability exists in IBM WebSphere Portal that could be exploited b...

SAP Mobile Platform SysAdminWebTool servlets elevation of privilege vulnerability

SAP Mobile Platform is a set of mobile application development platform from SAP. A security vulnerability in the SysAdminWebTool servlets of SAP Mobile Platform allows remote attackers to bypass authentication and gain access to sensitive information and privileges...

CloudBees Jenkins CI Information Disclosure Vulnerability

CloudBees Jenkins CI formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . An information disclosure vulnerability exists in CloudBees Jenkins CI, which can be exploited by attackers to bypass security restrictions a...

SQL Injection Vulnerability in Panmicro Collaborative Business System

Panavision Collaborative Business System is a complete enterprise collaborative work platform. A SQL injection vulnerability exists in the typename and id parameters of the Panmicro Collaborative Business System. It allows attackers to exploit the vulnerability to gain access to sensitive...

WordPress Plugin WP Symposium 15.1 - Blind SQL Injection

Details ================ Software: WP Symposium Version: 15.1 Homepage: https://wordpress.org/plugins/wp-symposium Advisory report: https://security.dxw.com/advisories/blind-sql-injection-in-wp-symposium-allows-unauthenticated-attackers-to-access-sensitive-data/ CVE: Awaiting assignment CVSS: 6.4...

SAP NetWeaver AS JAVA - SQL injection vulnerability

Application: SAP NetWeaver AS JAVA Versions Affected: SAP NetWeaver AS JAVA 7.1 – 7.5 Vendor URL: SAP Bugs: SQL injection Reported: 18.08.2015 Vendor response: 19.08.2015 Date of Public Advisory: 09.02.2016 Reference: SAP Security Note 2101079 Author: Vahagn Vardanyan ERPScan VULNERABILITY...

Microsoft Windows Kernel 'Win32k.sys' Information Disclosure Vulnerability

Microsoft Windows is a family of operating systems from Microsoft. An information disclosure leak exists in the Microsoft Windows Kernel 'Win32k.sys'. A local attacker can exploit the vulnerability to obtain sensitive information, bypass certain security restrictions and perform unauthorized...

CollabNet Subversion Edge Security Bypass Vulnerability

CollabNet Subversion Edge is a free web-based and cloud-based Subversion platform. A security vulnerability exists in CollabNet Subversion Edge that could be exploited by an attacker to perform unauthorized actions, obtain sensitive information, and elevate privileges...

SQL Injection Vulnerability in the Page Parameters of Nanjing Jenohan Journal Submission System

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. SQL injection vulnerability exists in the page parameter ...

WebCC Remote Video Surveillance System Exploits Violent Breach Vulnerability

WebCC remote video surveillance system is a video surveillance system of Jinan Zhongwei Century Technology Co. Zhongwei WebCC remote video surveillance system has a brute-force cracking vulnerability. Comprehensive use of the vulnerability, the attacker can use the vulnerability to blast the user...

SQL Injection Vulnerability in Mobile OPAC Library Portal System of Huifen Software

Ltd.'s Mobile Library Portal System is a mobile service solution integrating Pocket Portal and Pocket APP, which brings readers and libraries closer together in the era of mobile intelligence. SQL injection vulnerability in Huiwen Software Mobile OPAC Library Portal System. Allows an attacker to...

Hotspot Express hotEx Billing Manager cgi-bin/hotspotlogin.cgi Cross-Site Scripting Vulnerability

Hotspot Express hotEx Billing Manager is a billing management system. A cross-site scripting vulnerability in Hotspot Express hotEx Billing Manager cgi-bin/hotspotlogin.cgi allows attackers to submit special reply parameters to inject malicious HTML or scripts and obtain sensitive information...

Inductive Automation Ignition Information Disclosure Vulnerability (CNVD-2015-02154)

Ignition is an updated version of FactoryPMI, the HMI/SCADA product offered by Inductive Automation. Inductive Automation Ignition suffers from an information disclosure vulnerability that could be exploited by an attacker to gain access to sensitive information...

EMC M&R (Watch4net) < 6.5u1 Multiple Vulnerabilities

EMC M&R Watch4net is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:emc:watch4net"; if...

SQL Injection Vulnerability in VOLANS SR Internet Behavior Audit Gateway of Chengdu Flying Fish Star Technology Co.

VOLANS SR Internet Behavior Audit Gateway of Chengdu Flyingfish Star Technology Co., Ltd. is designed for small and medium-sized enterprises, providing perfect Internet behavior management, intelligent bandwidth management and multi-line load balancing solutions. SQL injection vulnerability exist...

SQL Injection Vulnerability in Hotel Online Direct Marketing Platform of Guangzhou Askway Information Technology Co.

Ltd. is a set of hotel online direct marketing technology and operation service system, focusing on building their own online direct marketing platform and system for hotels, providing consulting, advisory, training and other services to help hotels to improve the operation and revenue capacity...

CVE-2014-8161

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message...