395 matches found
CVE-2019-4601
IBM Quality Manager RQM 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain sensitive information from a stack trace that could aid in further attacks against the system...
CVE-2017-18679
An issue was discovered on Samsung mobile devices with M6.0 software. SLocation can cause a system crash via a call to an API that is not implemented. The Samsung ID is SVE-2017-8285 April 2017...
apiconnect-cli-plugins Command Injection Vulnerability
apiconnect-cli-plugins is a development kit plugin for IBM API Connect. An injection vulnerability exists in apiconnect-cli-plugins version 6.0.1 and earlier. An attacker can exploit this vulnerability to execute arbitrary commands with the help of the 'pluginUri' parameter...
libvirt Denial of Service Vulnerability (CNVD-2020-20734)
Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A security vulnerability exists in the qemu/qemudriver.c file...
DEBIAN-CVE-2020-1767
Agent A is able to save a draft i.e. for customer reply. Then Agent B can open the draft, change the text completely and send it in the name of Agent A. For the customer it will not be visible that the message was sent by another agent. This issue affects: OTRS Community Edition 6.0.x version...
CVE-2019-19707
On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices with firmware through 6.0, denial of service can occur via PROFINET DCE-RPC endpoint discovery packets...
IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2019-44534)
IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A SQL injection vulnerability exists in IBM Sterling B2B...
Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2019-37933)
Oracle VM VirtualBox is cross-platform virtualization software for x86 systems. An unspecified vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 5.2.34 and 6.0.14. An attacker could exploit this vulnerability to compromise confidentiality, integrity, and...
UBUNTU-CVE-2019-3031
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.34 and prior to 6.0.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...
Adobe Experience Manager Reflective Cross-Site Scripting Vulnerability (CNVD-2019-37130)
Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. A reflected cross-site scripting vulnerability exists in Adobe Experience Manager 6.0, 6.1, 6.2, 6.3, 6.4, and 6.5. An attacker can exploit this...
CVE-2019-4494
IBM Jazz Reporting Service JRS 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...
Alfresco Software Alfresco Community Edition Encryption Issue Vulnerability
Alfresco Software Alfresco Community Edition is the United States Alfresco Software, Inc. of a set of open source enterprise content management system community edition. The system includes document management , office collaboration and other functions . An encryption vulnerability exists in...
PT-2019-12916 · Otrs +2 · Otrs Community Edition +2
Name of the Vulnerable Software and Affected Versions: Open Ticket Request System OTRS Community Edition versions 5.0.x through 5.0.36 Open Ticket Request System OTRS Community Edition versions 6.0.x through 6.0.19 Description: An issue was discovered where a user logged into OTRS as an agent mig...
Information leakage vulnerability in the frontend of Yiqin General Attendance Management System V6.0
Beijing Yiqin Information Technology Co., Ltd. focuses on the research of labor force attendance and working hour solutions, and creates the Yiqin labor power and working hour management platform. Information leakage vulnerability exists in the frontend of Yiqin General Attendance Management Syst...
Stored Cross-Site Scripting Vulnerability in OpenSNS_v6.0
OpenSNS is a lightweight social user center framework based on OneThink. The system adheres to a minimalist design style and focuses on communication. A stored cross-site scripting vulnerability exists in OpenSNSv6.0. An attacker can insert malicious js code into a page to obtain user cookies and...
Open Ticket Request System Code Injection Vulnerability
Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and the service...
IBM Rational Quality Manager Cross-Site Scripting Vulnerability (CNVD-2019-20850)
IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines three products, RTC, RQM, and RRC, in a single IBM SmartCloud Enterprise cloud environment image to provide requirements management,...
IBM Rational Collaborative Lifecycle Management Cross-Site Scripting Vulnerability (CNVD-2019-21081)
IBM Rational Collaborative Lifecycle Management CLM is a suite of collaborative lifecycle management solutions from IBM in the United States. The solution combines three products, RTC, RQM, and RRC, in a single IBM SmartCloud Enterprise cloud environment image to provide requirements management,...
PT-2019-16994 · Ibm · Ibm Rational Collaborative Lifecycle Management
Name of the Vulnerable Software and Affected Versions: IBM Rational Collaborative Lifecycle Management versions 6.0 through 6.0.6.1 Description: The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request containing "dot dot" sequences /../ ...