816 matches found
CVE-2016-3468
Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 and 6.2.0.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Install...
TYPO3 Bootstrap Package Extension Cross-Site Scripting Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.Bootstrap Package is one of the plugins that configures the front-end theme extension. A cross-site scripting vulnerability exists in versions of TYPO3 Bootstrap Package...
Drupal Embedded Media Field Module Security Bypass Vulnerability
Drupal is a free and open source content management system developed in PHP and maintained by the Drupal community.Embedded Media Field is one of the modules used to embed third-party video and audio. A security bypass vulnerability in the Drupal Embedded Media Field module 6.x-2.7 before version...
SolarWinds Storage Resource Monitor Profiler SQL Injection Vulnerability
SolarWinds Storage Resource Monitor SRM Profiler formerly known as Storage Manager, STM is a set of Web-based data storage management software from SolarWinds Inc. that integrates storage monitoring, reporting, alarming, and predictive analytics. A SQL injection vulnerability exists in the Web...
Foxit Reader Foxit Cloud Update Service Privilege Gain Vulnerability
Foxit Reader is a PDF document reader from China's Foxit Software Corporation.Foxit Cloud Update Service FoxitCloudUpdateService is one of the cloud update services. A privilege acquisition vulnerability exists in the Foxit Cloud Update Service FoxitCloudUpdateService in Foxit Reader versions 6.1...
DEBIAN-CVE-2015-8607
The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string...
PT-2016-3900 · Grassroots · Grassroot Dicom
Name of the Vulnerable Software and Affected Versions: Grassroots DICOM versions prior to 2.6.2 Description: The issue allows remote attackers to obtain sensitive information from process memory or cause a denial of service via an embedded JPEG-LS image with dimensions larger than the selected...
TYPO3 Front-end Component Cross-Site Scripting Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in the front-end component of TYPO3 versions 6.2.x before 6.2.16 and 7.x before 7.6.1. A remote attacker can exploit this vulnerabilit...
Splunk Enterprise Cross-Site Scripting Vulnerability (CNVD-2015-06521)
Splunk Enterprise is an enterprise-grade log analytics software that runs in Unix environments. A cross-site scripting vulnerability in Splunk Enterprise version 6.2.x prior to 6.2.6 and Splunk Light version 6.2.x prior to 6.2.6 allows remote attackers to inject arbitrary web script or HTML via...
TYPO3 Flowplayer Library Cross-Site Scripting Vulnerability
TYPO3 is a free and open source content management system framework CMS/CMF maintained by the TYPO3 Association in Switzerland.Flowplayer library is one of the Flash video playback libraries. A cross-site scripting vulnerability exists in the TYPO3 Flowplayer library versions 6.2.0 through 6.2.13...
PT-2015-5804 · Oracle +6 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.43 and earlier Oracle MySQL Server versions 5.6.24 and earlier Description: The issue affects the availability of the system, related to the Optimizer component in the Server. The estimated number of potential...
PT-2015-2789 · Oracle +6 · Mysql Server +6
Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 5.5.43 and earlier Oracle MySQL Server versions 5.6.24 and earlier Description: The issue is related to errors in the code of the MySQL database management system. It may allow a remote attacker to disrupt the...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information
The vulnerability of the rsyslog-debuginfo-4.6.2 package for the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. Exploitation of this vulnerability can be carried out remotely...
Apple Safari WebKit Memory Corruption Vulnerability (CNVD-2015-01862)
WebKit is the open source web browser engine currently used by Safari, Chrome and other browsers. A security vulnerability in the WebKit user interface in Apple Safari versions prior to 6.2.4, 7.x versions prior to 7.1.4, and 8.x versions prior to 8.0.4 allows remote attackers to execute arbitrar...
Red Hat JBoss Enterprise Application Platform Role Based Access Control Component Security Bypass Vulnerability
Red Hat JBoss Enterprise Application Platform is an open source, J2EE-based middleware platform for building, deploying, and hosting Java applications and services.JBoss Application Server AS, also known as WildFly is an open source JavaEE-based application server; the JacORB subsystem is a...
CVE-2014-8367
SQL injection vulnerability in Aruba Networks ClearPass Policy Manager CPPM 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2014-2049
The default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows remote attackers to access user files via unspecified vectors...
UBUNTU-CVE-2012-6090
Multiple stack-based buffer overflows in the expand function in os/pl-glob.c in SWI-Prolog before 6.2.5 and 6.3.x before 6.3.7 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted filename...
UBUNTU-CVE-2012-0523
Unspecified vulnerability in the Oracle Grid Engine component in Oracle Sun Products Suite 6.1 and 6.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to sgepasswd...