430 matches found
CVE-2019-2822
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Shell: Admin / InnoDB Cluster. Supported versions that are affected are 8.0.16 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL...
UBUNTU-CVE-2019-2864
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM...
CVE-2019-1018
An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with...
Memory Corruption Vulnerability in Softi ScanWiz V2
Softi ScanWiz is a scanning and optical character recognition software. A memory corruption vulnerability exists in Softi ScanWiz V2. An attacker could exploit this vulnerability to gain control of a user's system or crash the program...
Memory corruption vulnerability in Yonghong FD300 fpj project file
YHM Taiwan specializes in the highly functional small, medium and micro PLC market segments. A memory corruption vulnerability exists in the Yonghong FD300 fpj project file, which allows an attacker to trick a user into opening a malicious fpj file, executing malicious code, and ultimately gainin...
Memory Corruption Vulnerability in Display Control Remote HMI
Remote HMI is a configuration software produced by Shenzhen Xianzhu Technology Co. A memory corruption vulnerability exists in the handling of smc project files in Remote HMI, which can be exploited by attackers to gain control of the user's system or crash the program...
UBUNTU-CVE-2019-2500
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...
Adobe Experience Manager HTML Injection Vulnerability (CNVD-2019-06891)
Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. An HTM...
CVE-2018-3294
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows low privileged attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful...
CVE-2018-2909
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
CVE-2018-3293
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
Unspecified Vulnerability in Oracle Java SE, Java SE Embedded and JRockit (CNVD-2019-26739)
Oracle Java SE is a product of Oracle Corporation. Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE Embedded is a Java platform for embedded systems and portable applications...
LG Network Storage N1A1DD1 imgcopy.php has a remote command execution vulnerability
The LG Network Storage N1A1DD1 is a networked storage product NAS. The LG Network Storage N1A1DD1 imgcopy.php suffers from a remote command execution vulnerability that can be exploited by an attacker to execute arbitrary commands and take control of the device...
LG Network Storage N1A1DD1 sharedir.php has a remote command execution vulnerability
The LG Network Storage N1A1DD1 is a networked storage product NAS. The LG Network Storage N1A1DD1 sharedir.php suffers from a remote command execution vulnerability that can be exploited by an attacker to execute arbitrary commands and take control of the device...
Oracle Fusion Middleware Unspecified Vulnerability in Fusion Middleware MapViewer Component
Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments that provides middleware, software collections, and other functionality. analysis development toolkit. An unspecified vulnerability exists in the Oracle Fusion Middleware Fusion Middleware...
UBUNTU-CVE-2018-3087
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
SLiMS 8 Akasia Stock Take Module Cross-Site Scripting Vulnerability
SLiMS 8 Akasia is an open source, free library management system.Stock Take module is one of the book inventory statistics module. A cross-site scripting vulnerability exists in the Stock Take module in SLiMS 8 Akasia version 8.3.1. A remote attacker can use...
CVE-2018-12658
Reflected Cross-Site Scripting XSS exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stocktake/index.php?keywords= URI...
