SQL Injection Vulnerability in PbootCMS Backend

PbootCMS is a new core open source enterprise building system developed by Avantech. There is a SQL injection vulnerability in PbootCMS backend. Attackers can use this vulnerability to obtain sensitive information in the database...

Hardcoded credentials

Hardcoded credentials in the Ricoh myPrint application 2.9.2.4 for Windows and 2.2.7 for Android give access to any externally disclosed myPrint WSDL API, as demonstrated by discovering API secrets of related Google cloud printers, encrypted passwords of mail servers, and names of printed files...

SUSE-SU-2018:4130-1 Security update for ansible

This update for ansible fixes the following issues: Ansible was updated to ansible 2.4.6.0. The full release notes can be found on: https://github.com/ansible/ansible/blob/stable-2.4/CHANGELOG.md Security issues fixed: - CVE-2018-10875: ansible.cfg is read from the current working directory which...

CVE-2018-1805

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 149704...

Security Bulletin: IBM Security Guardium is affected by a Using Components with Known Vulnerabilities vulnerability

Summary IBM Security Guardium has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2015-5237 DESCRIPTION: Google Protocol Buffers could allow a remote attacker to execute arbitrary code on the system, caused by an integer overflow in MessageLite::SerializeToString. A remo...

CVE-2018-1476

IBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 140757...

CVE-2018-1957

IBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by the application based on an incorrect return by the httpServletRequestauthenticate API when an unprotected URI is accessed. IBM X-Force ID: 153629...

SQL Injection Vulnerability in Chihuahua Software F22 Apparel Management Software

Guangzhou Zhihua Software Technology Co., Ltd. is a high-tech enterprise specializing in providing information technology solutions for brand-name apparel, shoes and bags enterprises. A SQL injection vulnerability exists in Chihuahua Software F22 Apparel Management Software. An attacker can explo...

IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2018-25033)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A security...

SQL Injection Vulnerability in CCTV Online Teaching Platform

CCTV Digital Resource Teaching Platform is a platform for flexible lesson preparation and convenient teaching created for schools by Nanjing 55th Technology Development Co. A SQL injection vulnerability exists in the CCTF Online Network Teaching Platform. An attacker can use this vulnerability to...

SQL Injection Vulnerability in se***.php Page of Tianmu MVC Web Management System

Tianmu MVC website management system is Pizhou Tianmu Network Technology Co., Ltd. developed a professional PHP + MYSQL products, the use of independent MVC framework, applicable to large and small and medium-sized enterprises of the open source MVC. Tianmu MVC website management system se.php pa...

SQL Injection Vulnerability in Shenzhen Huaji Future Website Building System

Ltd., is a Shenzhen Internet company, provides website construction services. Shenzhen Huaqi future website builder system SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

S-CMS Enterprise Website Builder System suffers from SQL Injection Vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website building system v3.0 PHP build20181126 version exists SQL injection vulnerability. An attacker can exploit...

SQL Injection Vulnerability in GreenCMS

GreenCMS is a ThinkPHP-based content management system. GreenCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Rabbit Movie CMS

Rabbit TV CMS is an open source content building system. Rabbit Movie CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in QYKCMS v4.3.2

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS v4.3.2 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

webERP Manufacturing Component SQL Injection Vulnerability

webERP is an open source inventory and financial management system ERP system. The system supports inventory management , rights role management , order management and financial management , etc. Manufacturing is one of the components . webERP 4.15 version of the Manufacturing component of the...

GHSA-RXMR-C9JM-7MM8 Exposure of Sensitive Information to an Unauthorized Actor in Apache hive

In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs xpath/xpathstring/xpathboolean/xpathnumber/xpathdouble/xpathfloat/xpathlong/xpathint/xpathshort to expose the content of a file on the machine running HiveServer2 owned by HiveServer2 user usually hive if...

SQL Injection Vulnerability in DaCong Network Technology Company's Website Building System

DaCong Network Technology Inc. is an Internet technology service company. A SQL injection vulnerability exists in the website building system of DaCong Network Technology Company. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Shenzhen Zhongwang Internet Technology Development Co.

Ltd. is a one-stop Internet service provider that focuses on web application development and visual design, supplemented by online interactive brand marketing. There is a SQL injection vulnerability in the website building system of Shenzhen Zhongwang Internet Technology Development Co. Attackers...