CVE-2017-3110: Exposure of Sensitive Information to an Unauthorized Actor

Adobe Experience Manager 6.1 and earlier has a sensitive data exposure vulnerability...

PT-2017-15660

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.1 and earlier Description The issue is related to sensitive data exposure. Recommendations For Adobe Experience Manager versions 6.1 and earlier, update to a version that is not affected by this issue...

WSTMall open source mall system LogLoginsAction.class.php exists SQL injection vulnerability

WSTMall is a multi-commercial O2O open source system developed by Merchant Software based on thinkphp, a system that can help businesses and individuals to quickly build a community service system. WSTMall open source mall system LogLoginsAction.class.php has a SQL injection vulnerability due to...

MEDHOST Connex Hardcoded Password

CVE-2017-11743 Overview ------------ MEDHOST Connex contains a hard-coded Mirth Connect admin password in all versions. This is a new vulnerability not related to CVE-2016-4328, CVE-2017-11614, CVE-2017-11693 or CVE-2017-11694. Description ------------ MEDHOST Connex contains a hard-coded Mirth...

SQL injection vulnerability in news-details.php page of Interactive Creation website builder system

Interactive Creative Xiamen Digital Technology Co., Ltd. is a brand website construction company in Fujian Province, "Interactive Creative" is one of its independent brands. A SQL injection vulnerability exists in the news-details.php page of the Interactive Creative website builder system. An...

SQL injection vulnerability in the cid parameter of list.php page of JiuJiu website builder system

Daqing JiuJiu Network Technology Co., Ltd. is a technical service enterprise diversified in the field of full network marketing, enterprise e-commerce, network information technology services. There is a SQL injection vulnerability in the cid parameter of the list.php page of the JiuJiu network...

Code injection

Sensitive data can be exposed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 that can lead to an attacker gaining unauthorized access to the system. IBM X-Force ID: 126867...

CVE-2017-1374

Sensitive data can be exposed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 that can lead to an attacker gaining unauthorized access to the system. IBM X-Force ID: 126867...

PT-2017-13060

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 through 3.5 Description Sensitive data can be exposed, potentially allowing an attacker to gain unauthorized access to the system. Recommendations For versions 3.3 through 3.5, update to a version...

Niushop open source mall system Auth.php has sql injection vulnerabilities

NiuShop open source mall system , is by the Shanxi Niu Cool Information Technology Co., Ltd. completely independent design , research and development of a PHP open source e-commerce system . Niushop open source mall system Auth.php file parameters exist in the SQL injection vulnerability...

wstmall open source mall system endDate parameter SQL injection vulnerability

WSTMall is a multi-commercial O2O open source system developed by Merchant Software based on thinkphp, is a system that can help companies and individuals to quickly build a community service system. wstmall open source mall system endDate parameter SQL injection vulnerability , due to the system...

SQL Injection Vulnerability in yiifcms Content Management System

yiifcms is a content management system CMS developed on the yii framework. A SQL injection vulnerability exists in the yiifcms content management system due to the system's failure to strictly filter the id and catalogid parameters. An attacker can exploit this vulnerability to obtain sensitive...

IBM Maximo Asset Management Local Information Disclosure Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A local...

Niushop open source mall system goodshistory parameter SQL injection vulnerabilities exist

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . Niushop open source mall system goodshistory parameters exist SQL injection vulnerability . As the system...

UBUNTU-CVE-2017-5528

Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting XSS and cross-site request forgery CSRF attacks. The impact of this vulnerability includes the theoretical disclosure of sensitive information. Affects TIBCO...

Elasticsearch Logstash Information Disclosure Vulnerability (CNVD-2017-14152)

Elasticsearch Logstash is a set of log analysis and monitoring tools from Elasticsearch Netherlands. The tool provides functions such as search, processing and management of logs or events. An information disclosure vulnerability exists in Elasticsearch Logstash versions prior to 2.3.4. An attack...

CVE-2017-1131

IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, specially crafted HTTP commands. IBM X-Force ID: 121375...

SQL Injection Vulnerability in Xiangsoft Smart Campus Platform

Xiangsoft Smart Campus Platform is an informative and intelligent software system. SQL injection vulnerability exists in Xiangsoft Technology Smart Campus Platform. An attacker can use this vulnerability to obtain sensitive information of the database...

FinecmsV5.0.8 has an arbitrary file read vulnerability

FineCMS is an efficient and simple small and medium-sized content management system based on PHP+MySql+CI framework. An arbitrary file read vulnerability exists in FinecmsV5.0.8. An attacker can exploit this vulnerability to obtain sensitive database information...

MediaWiki Multiple Vulnerabilities (Apr 2017) - Linux

MediaWiki is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mediawiki:mediawiki"; if...