7008 matches found
MediaWiki Multiple Vulnerabilities (Aug 2016) - Linux
MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; if...
WordPress HDW Player Plugin SQL Injection Vulnerability
HDW Player is an application plugin available on the official WordPress Store that provides streaming media playback services. The WordPress HDW Player plugin suffers from a SQL injection vulnerability, which is exploited by attackers to read sensitive information in the database...
Google Android NVIDIA Crypto Driver Information Disclosure Vulnerability
Google Android is a mobile operating system based on the Linux open kernel. An information disclosure vulnerability exists in Google Android NVIDIA Crypto Driver. An attacker can exploit this vulnerability to obtain sensitive information...
CVE-2017-3884
A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to access sensitive data. The attacker does not need administrator credentials and could use this information to conduct additional...
CVE-2016-8779
Huawei FusionAccess with software V100R005C10 and V100R005C20 could allow remote attackers with specific permission to inject a Lightweight Directory Access Protocol LDAP operation command into a specific input variable to obtain sensitive information from the database...
Unspecified SQL Injection Vulnerability in EyesOfNetwork
EyesOfNetwork EON is an open source, free IT monitoring solution. The solution provides features such as a business process configuration tool, generating pop-up windows when events occur in the active queue, and more. EyesOfNetwork suffers from an unspecified SQL injection vulnerability. Allows ...
QNAP QTS 4.2.4 - Domain Privilege Escalation
QNAP QTS 4.2.4 - Domain Privilege Escalation QNAP QTS Domain Privilege Escalation Vulnerability Name Sensitive Data Exposure in QNAP QTS Systems Affected QNAP QTS NAS all model and all versions 4.2.4 Severity High 7.9/10 Impact CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Vendor...
QNAP QTS < 4.2.4 - Domain Privilege Escalation
QNAP QTS Domain Privilege Escalation Vulnerability Name Sensitive Data Exposure in QNAP QTS Systems Affected QNAP QTS NAS all model and all versions 4.2.4 Severity High 7.9/10 Impact CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Vendor http://www.qnap.com/ Advisory...
QNAP QTS Privilege Escalation / Information Disclosure
QNAP QTS Domain Privilege Escalation Vulnerability Name Sensitive Data Exposure in QNAP QTS Systems Affected QNAP QTS NAS all model and all versions 4.2.4 Severity High 7.9/10 Impact CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Vendor http://www.qnap.com/ Advisory...
Moodle Information Disclosure Vulnerability (CNVD-2017-04096)
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. Moodle suffers from an information disclosure vulnerability. An attacker could exploit...
OpenStack Nova Information Disclosure Vulnerability (CNVD-2017-04265)
OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration in collaboration with Rackspace, Inc.OpenStack Nova is one of the cloud computing construct controllers written in Python that is part of the IaaS system. It is part of the IaaS system....
SQL Injection Vulnerability in Webservice of Wando ezOFFICE Collaboration Office System
Wando ezOFFICE collaborative management platform is a comprehensive information base application platform. A SQL injection vulnerability exists in the Wando ezOFFICE Collaborative Office System webservice. The lack of filtering of the 'SOAP unitLevel' parameter allows attackers to exploit the...
Dahua DHI-HCVR7216A-S3 Information Disclosure Vulnerability
Dahua DHI-HCVR7216A-S3 is a network DVR product from China Dahua Dahua. A security vulnerability exists in the web interface of the NVR firmware version 3.210.0001.10, Camera firmware version 2.400.0000.28.R and SmartPSS software version 1.16.1 in the Dahua DHI-HCVR7216A-S3 device. A remote...
SQL Injection Vulnerability in 'tablename_abc' Parameter of Xinhoo Collaboration Office System
Xinhuo coworking system is an open source office system, cross-platform system, support APP, pc web version, pc client and so on. SQL injection vulnerability exists in the 'tablenameabc' parameter of Xinhao Co-op Office System. Allow attackers to exploit the vulnerability to obtain sensitive...
OpenStack Mistral Local Information Disclosure Vulnerability
OpenStack Mistral is a workflow service that provides flexible task scheduling so that we can run processes according to a specified schedule rather than immediately. OpenStack Mistral suffers from a local information disclosure vulnerability. An attacker can exploit this vulnerability to obtain...
DEBIAN-CVE-2016-7623
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to obtain sensitive information via a blob URL on a web site...
Cisco Prime Collaboration Assurance Information Leakage Vulnerability
Cisco Prime Collaboration Assurance is a video and voice services solution. A remote information leakage vulnerability exists in Cisco Prime Collaboration Assurance. An attacker could exploit this vulnerability to obtain sensitive information and cause further attacks...
Cisco Unified Communications Manager Information Leakage Vulnerability
Cisco Unified Communications Manager CUCM, Unified CM is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. An information leakage vulnerability exists i...
SQL Injection Vulnerability in Ocean CMS zyapi.php Page
Ocean CMS is an open source website builder. A SQL injection vulnerability exists in the Ocean CMS zyapi.php page. The lack of filtering of the '$ids' parameter allows attackers to exploit the vulnerability to obtain sensitive information about the database...