CVE-2018-0323

A vulnerability in the web management interface of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to conduct a path traversal attack on a targeted system. The vulnerability is due to insufficient validation of web request parameters. An attacker w...

SQL Injection Vulnerability in SMiCMS School Station Group System v20180314 Version

State Micro CMS formerly PHP168 S series is a leading manufacturer of domestic government, school and group platforms, and is also the largest open source system provider in the field of PHP in southern China. State Micro CMS school station group system v20180314 version of the existence of SQL...

Amazon Linux 2 : libvncserver (ALAS-2018-1012)

Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or possibly...

Medium: libvncserver

Issue Overview: Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or...

Google Android Framework (aosp email application) Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Framework aosp email application is a framework for email applications. Framework aosp email application is one of the...

SQL Injection Vulnerability at CMS destination

Situ CMS is a self-developed website management system suitable for tourism website construction. A SQL injection vulnerability exists in CMS destination. The vulnerability is caused due to the system failing to strictly filter user input data. An attacker can exploit this vulnerability to obtain...

Multiple SQL Injection Vulnerabilities in GxlcmsQY System

GxlcmsQY system is a simple program tailored for business users. GxlcmsQY System has multiple SQL injection vulnerabilities. An attacker can exploit the vulnerabilities to obtain sensitive database information...

Apple Mac OS X Security Updates (HT208692)-01

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dongdao network cms has SQL injection vulnerability

Dongdao Network is committed to e-commerce and network product development, business content includes professional website construction and maintenance, B2B B2C e-commerce platform development, construction and operation of large-scale portals, planning and development, B / S-type OA system...

Arbitrary File Read Vulnerability in Light CMS Version 1.7

Light CMS is an intelligent website building system built in PHP+MYSQL environment. Light CMS 1.7 version of the arbitrary file reading vulnerability, an attacker can exploit the vulnerability to read any file within the site to obtain sensitive information...

SQL Injection Vulnerability in BEESCMS Frontend member.php and order_save.php Pages

BEESCMS is an enterprise website management system based on PHP+Mysql architecture. A SQL injection vulnerability exists in the BEESCMS frontend member.php and ordersave.php pages. An attacker can exploit the vulnerability to obtain sensitive database information...

TestLink Open Source Test Management Insecure Direct Object Reference Vulnerability

Exploit for php platform in category web applications ======================================================================= title: Insecure Direct Object Reference product: TestLink Open Source Test Management vulnerable version: 1.9.17 fixed version: 1.9.17 after November 2017, and the current...

Website Security Dog suffers from SQL Injection Vulnerability

Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. Website Security Dog suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in admin_datarelate.php page of DuomiCms movie and TV management system

DuomiCms is a video-on-demand system designed for film and television station owners. A SQL injection vulnerability exists in the admindatarelate.php page of the Duomi DuomiCms Movie and TV Management System x3.0UTF8Official Edition. An attacker can exploit the vulnerability to obtain sensitive...

Mozilla Firefox Security Advisories (MFSA2018-02, MFSA2018-03) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

SQL Injection Vulnerability in the Enterprise Website System of Zhongshan Tengning Network Technology Co.

Zhongshan TENNING Network Technology Co., Ltd. is a professional and technical company focusing on enterprise website construction, promotion, WeChat development, focusing on providing SMEs with the most cost-effective website building services. TENNING Network Technology Co., Ltd. corporate...

Microsoft Windows Multiple Vulnerabilities (KB4056898)

This host is missing an important security update according to Microsoft KB4056898 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB4056897)

This host is missing an important security update according to Microsoft KB4056897 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

SQL Injection Vulnerability in Diyou p2p Lending System V4.1

Diyou P2P lending system is a cloud-based p2p lending system, p2p lending program software and online financial investment system. A SQL injection vulnerability exists in emperor friend p2p lending system V4.1, the vulnerability is due to the program failing to effectively filter the data submitt...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2018-00751)

Internet Explorer is a web browser from Microsoft. An information disclosure vulnerability exists in Microsoft Internet Explorer, which can be exploited by an unauthenticated, remote attacker to gain access to sensitive information on the target system...