ECAVA IntegraXor < 5.0.4522 Multiple Vulnerabilities

ECAVA IntegraXor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ecava:integraxor"; if...

Arbitrary File Download Vulnerability in Enterprise Information Management System of Chongqing Gezhi Technology Development Co.

GZEE is a provider of enterprise management and collaborative business solutions. An arbitrary file download vulnerability exists in the enterprise information management system of Chongqing GZEE Technology Development Co. The vulnerability allows an attacker to download arbitrary files and obtai...

SQL Injection Vulnerability in BoZone Travel Distribution System

Wuhan Bozhong E-commerce Co., Ltd. is a new technology-based enterprise specializing in travel agency management software development and sales, website production, and customized development of SME management system. A SQL injection vulnerability exists in the BoZone Travel Distribution System...

SQL Injection Vulnerability in InfoId Parameter of Wave's Government e-Government System

The government e-government system is the social security information system government agencies and institutions information management system civil service management subsystem. Wave's government e-government system InfoId parameter SQL injection vulnerability, attackers can use the vulnerabili...

Zhengzhou Rocky Electronic Technology Co., Ltd. 686 WeChat CPS distribution system id parameter has SQL injection vulnerability

686 WeChat CPS distribution system is a CPS advertising platform system that connects merchants and promoters, promoters, WeChat public platform traffic owners by registering on the platform to promote the goods released by the merchants, the goods sold to get commission. Zhengzhou Rocky Electron...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.(CNVD-2016-06025)

Fuzhou Chuangda Electronics Co., Ltd. is a high-tech enterprise specializing in software development, system integration, security services and other computer information services. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection management system/jy/util/selectryone.jsp?ryqx=1...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.(CNVD-2016-06020)

Fuzhou Tranda Electronics Co., Ltd. is a high-tech enterprise specializing in software development, system integration, security services and other computer information services. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection management system is a data information management...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.

Special Equipment Inspection Management System of Fuzhou Chuangda Electronics Co., Ltd. is a data and information management system. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection and management system: /jy/util/areaadmin.jsp?supform=froms&supaid=area&supcd=DQDM&supnm=area&csh...

SQL injection vulnerability in the coursewares.htm?recommend= parameter of the distance learning platform of Shenzhen Tengchuang Network Technology Co.

Tengchuang Internet Distance Education Platform is an online knowledge trading platform centered on real-time interactive online classroom, combining powerful functions such as courseware on-demand, course transaction, online payment, and online examination, etc. for students and teachers in...

SQL injection vulnerability in the remote education platform teacher.htm?id= parameter of Shenzhen Tengchuang Network Technology Co.

Tengchuang Internet Distance Education Platform is an online knowledge trading platform centered on real-time interactive online classroom, combining powerful functions such as courseware on-demand, course transaction, online payment, and online examination, etc. for students and teachers in...

Weak password vulnerability in the background management system of the website built by Luoyang Chancheng Network Technology Co.

Ltd. built website background management system is a website positioning analysis and recommendations, including website planning layout and structure of a complete set of solutions. There is a weak password vulnerability in the file /mgr/login.php of the background management system of the websi...

chromium-browser: type confusion in v8

uri.js in Google V8 before 5.1.281.26, as used in Google Chrome before 51.0.2704.63, uses an incorrect array type, which allows remote attackers to obtain sensitive information by calling the decodeURI function and leveraging "type confusion."...

phpmyadmin -- XSS and sensitive data leakage

The phpmyadmin development team reports: Description Because user SQL queries are part of the URL, sensitive information made as part of a user query can be exposed by clicking on external links to attackers monitoring user GET query parameters or included in the webserver logs. Severity We...

CVE-2016-1802

CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mishandles return values during key-length calculations, which allows attackers to obtain sensitive information via a crafted app...

WordPress SEO by Yoast Plugin <= 3.2.4 - Sensitive Data Exposure

This plugin is prone to a subscriber settings sensitive data exposure vulnerability. Solution Update the plugin...

EMC RSA Data Loss Prevention Information Disclosure Vulnerability

EMC RSA Data Loss Prevention DLP is a data loss prevention product from EMC Corporation. The product is used to discover and monitor the location and flow of sensitive data such as customer credit card data, employee PII, or company intellectual property and provides features such as user trainin...

SQL Injection Vulnerability in Human Resource Management Platform of Guangzhou Hexie Software Technology Co.

Guangzhou Hexie Software Technology Co., Ltd. is a high-tech enterprise specializing in the research and development of human resource management software. HR software is an informatization tool that can assist in managing the company's human resources. There is a SQL injection vulnerability in t...

F5 BIG-IP and BIG-IQ Information Disclosure Vulnerabilities

F5 BIG-IP LTM, etc. are products of F5 USA.LTM is a local traffic manager; APM is a set of solutions that provide secure and unified access to business-critical applications and networks. An information disclosure vulnerability exists in multiple F5 BIG-IP and BIG-IQ products, which can be...

CVE-2015-8710

The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service out-of-bounds heap memory access and application crash, or possibly have unspecified other impact via an unclosed HTML comment...

Slack: Authentication bypass leads to sensitive data exposure (token+secret)

@secalert discovered an information disclosure on our server which took advantage of an authorization error that allowed the viewing of sensitive information on the server. We mitigated the issue and no longer expose such information, and performed an investigation to verify that no unauthorized...