816 matches found
Adobe Connect Server-Side Request Forgery Vulnerability
Adobe Connect is an online video conferencing software. A server-side request forgery vulnerability exists in Adobe Connect 9.6.2 and earlier versions. A remote user can exploit this vulnerability to bypass network access control by submitting a specially crafted request...
Adobe Connect Clickjacking Vulnerability
Adobe Connect is an online video conferencing software. A clickjacking vulnerability exists in Adobe Connect 9.6.2 and earlier versions. A remote user can exploit the vulnerability to hijack a target user's mouse clicks to act as the target user to perform actions on a website and obtain...
CVE-2017-13998
An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitive information from unauthorized access...
LOYTEC LVIS-3ME Relative Path Traversal Vulnerability
LVIS-3ME is a graphical user interface from LOYTEC. A relative path traversal vulnerability exists in LOYTEC LVIS-3ME versions prior to 6.2.0, which can be exploited by an attacker to create or modify files, or execute arbitrary code, due to the inability of the web user interface to prevent user...
SQL Injection Vulnerability in Xinqi Online Learning System V6.2.1
Xinqi Online Learning System is an online learning platform system that can make learning plans, realize supervision and monitoring, and assist learning. SQL injection vulnerability exists in version V6.2.1 of Xinqi Online Learning System, which can be exploited by attackers to obtain sensitive...
CVE-2017-6995
creationtimestamp| type| source ---|---|--- 2017-08-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42555...
CVE-2017-6999
creationtimestamp| type| source ---|---|--- 2017-08-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42555...
Apple iTunes for Windows iTunes Arbitrary Code Execution Vulnerability
Apple iTunes for Windows is a suite of Windows-based media player applications from Apple Inc. that are used to play and manage digital music and video files. An arbitrary code execution vulnerability exists in the iTunes component of Apple iTunes for Windows versions prior to 12.6.2. The...
Cisco Wide Area Application Services Denial of Service Vulnerability
Cisco Wide Area Application Services WAAS is the United States Cisco Cisco company's set of WAN link acceleration software. The software is mainly used for small bandwidth and high latency link environment. A denial of service vulnerability exists in the Server Message Block SMB service in Cisco...
IBM UrbanCode DeployXML External Entity Injection Vulnerability
IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the automation of complex applications in different...
CVE-2017-3609
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
CVE-2017-3604
Vulnerability in the Data Store component of Oracle Berkeley DB. The supported version that is affected is Prior to 6.2.32. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Data Store executes to compromise Data Store. Successful attacks...
Oracle Berkeley DB Local Vulnerability (CNVD-2017-06545)
Oracle Berkeley DB is the United States Oracle Oracle, an open source embedded database programming library , it can be bound with C, C++, Java, Perl, Python, Tcl and many other languages. data store is one of the data storage components. A security vulnerability exists in the Data Store componen...
Oracle Berkeley DB Local Vulnerability (CNVD-2017-06098)
Oracle Berkeley DB is a family of embeddable open source databases. Oracle Berkeley DB versions prior to 6.2.32 contain a security vulnerability in the DataStore component, which can be exploited by a local attacker to compromise confidentiality, integrity, and availability...
Apache Traffic Server Denial of Service Vulnerability
Apache Traffic Server is the United States Apache Apache Software Foundation of an efficient , scalable HTTP proxy and caching server . A denial of service vulnerability exists in Apache Traffic Server versions prior to 6.2.1. An attacker can exploit this vulnerability to cause the server to cras...
CVE-2016-9006
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : C1000264...
PT-2017-16112 · Cisco · Cisco Firepower Management Center
Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC versions 6.1.0 through 6.2.0 Description: A vulnerability in the Policy deployment module could allow an unauthenticated, remote attacker to prevent deployment of a complete and accurate rule base...
Liferay Portal Command Execution Vulnerability
Liferay is a J2EE-based portal solution that uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, an enterprise collaboration platform, a social network, and more. A command execution vulnerability exists in Liferay Portal versions prior to 6.2.1...
Microsoft .NET Framework Information Disclosure Vulnerability (CNVD-2016-12419)
Microsoft .NET Framework is a comprehensive and consistent programming model developed by Microsoft Corporation USA and a development platform for building Windows, Windows Store, Windows Phone, Windows Server and Microsoft Azure Windows Store, Windows Phone, Windows Server, and Microsoft Azure...