IBM OpenPages GRC Platform Information Disclosure Vulnerability

IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms for managing enterprise risk and compliance challenges. IBM OpenPages GRC Platform has a security vulnerability that allows a remote attacker to submit a special request to obtain sensitive information from an erro...

webalizer未授权访问

漏洞详情：Webalizer是一款免费的应用程序，可用于分析网站服务器日志，帮助管理员更清楚地了解你的网站或服务器收到的流量大小。可泄露网站路径，子域名或者关联域名（多为管理后台），站点ip等。漏洞地址：http://localhost/webalizer1、流量分析2、主机地址3、子域名或者关联域名4、网站路径...

SQL Injection Vulnerability in the infoflowId Parameter of Wave Software Administrative Services System

The Administrative Service System ASS is a comprehensive administrative service system that integrates information and consultation, approval and charging, management and coordination, and complaints and supervision. A SQL injection vulnerability exists in the infoflowId parameter of the Wave...

SQL injection vulnerability in namevalue parameter of travel e-commerce platform belonging to Shenzhen Dingyou.

The tourism e-commerce platform is also a platform for a business system that uses electronic means to operate the tourism industry and its distribution system, based on a network as the main body, a tourism information base and an electronic business bank. SQL injection vulnerability exists in t...

MGASA-2015-0328 Updated drupal packages fix security vulnerabilities

Cross-site scripting XSS vulnerability in the Autocomplete system in Drupal before 7.39 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to uploading files CVE-2015-6658. SQL injection vulnerability in the SQL comment filtering system in the Database API i...

SQL Injection Vulnerability in Core Business System of BaoLin Financial Technology Intermediary

Guangdong Bao Lian Financial Technology Co., Ltd. is an application software system integrator and it application platform operator dedicated to the informatization of the insurance industry. The intermediary core business system is one of the application systems of the company. A SQL injection...

Fedora 21 : xfsprogs-3.2.2-2.fc21 (2015-12406)

Gabriel Vlasiu reported that xfsmetadump, part of the xfsprogs suite of tools for the XFS filesystem, did not properly obfuscate data. xfsmetadump properly obfuscates active metadata, but the rest of the space within that fs block comes through in the clear. This could lead to exposure of stale...

Adobe LiveCycle Data Services Information Disclosure Vulnerability

Adobe LiveCycle Data Services is the United States Odo than Adobe company's set of application servers deployed on and integrated with RIA applications and J2EE and other enterprise applications server software. The software provides remote procedure call RPC services, messaging services and data...

Joomla! Helpdesk Pro Plugin Information Disclosure Vulnerability

Joomla! is a well-known content management system in foreign countries. Joomla! is a software system developed using the PHP language coupled with a MySQL database, which can be implemented on a variety of different platforms such as Linux, Windows, MacOSX and so on. An information disclosure...

KLA10629 Multiple vulnerabilities in Oracle Java SE

An unspecified vulnerabilities were found in Oracle Java SE. By exploiting these vulnerabilities malicious users can cause denial of service, affect integrity and obtain sensitive information. These vulnerabilities can be exploited remotely via vectors related to 2D, CORBA, JMX, Libraries, RMI,...

Adobe Flash Player and AIR Cross-Domain Information Disclosure Vulnerability (CNVD-2015-04565)

Adobe Flash Player is a player that parses SWF content. Adobe AIR is a technology developed for the integration of web and desktop applications, which allows you to control cloud-based programs on the web without having to go through a browser. Adobe Flash Player and AIR have implementation...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/flowimage_page.php Parameters

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flowimagepage.php parameter, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Panmicro E-office /E-mobile/flowform_page.php Parameters

Panmicro E-office is an OA product launched by Panmicro for small and medium-sized organizations. A SQL injection vulnerability exists in the Panmicro E-office /E-mobile/flowformpage.php parameter, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in FileId Parameter of Nanjing Jenohan Journal Submission System

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. An SQL injection vulnerability exists in the FileId...

SQL Injection Vulnerability in Page Parameters of Nanjing Jenohan Journal Submission System

Nanjing Jenohan Software Technology Co., Ltd. is for the development of hospital full cost accounting decision support software system, hospital performance management information system and hospital customer management information system. A SQL injection vulnerability exists in the page paramete...

SQL Injection Vulnerability in the type parameter of Haitian OA System/ZhuanTi/DocMain.asp Page

Haitian OA network office system is suitable for enterprises and institutions of the general-purpose network office software, the system adopts the leading B / S browser / server mode of operation, so that the network office is not subject to geographical restrictions. A SQL injection vulnerabili...

GNOME Epiphany 'DNSSoup.cpp' Information Disclosure Vulnerability

GNOME Epiphany is a browser product for the GNOME desktop. The product provides paging, cookie management, pop-up ad control, and other features. An information disclosure vulnerability exists in GNOME Epiphany 'DNSSoup.cpp'. The vulnerability allows attackers to obtain sensitive information...

PT-2017-6631 · Red Hat +1 · Abrt +2

Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: The issue concerns the kernel-invoked coredump processor in ABRT, which fails to properly check file ownership before writing core dumps. This allows local users with write permissions to the...

PYSEC-2015-3

The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file...

CVE-2015-4004

The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers to obtain sensitive information from kernel memory or cause a denial of service out-of-bounds read and system crash via a crafted packet...