605 matches found
Unspecified Vulnerability in Oracle Java SE, Java SE Embedded and JRockit (CNVD-2019-26739)
Oracle Java SE is a product of Oracle Corporation. Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments. Oracle Java SE Embedded is a Java platform for embedded systems and portable applications...
LG Network Storage N1A1DD1 sharedir.php has a remote command execution vulnerability
The LG Network Storage N1A1DD1 is a networked storage product NAS. The LG Network Storage N1A1DD1 sharedir.php suffers from a remote command execution vulnerability that can be exploited by an attacker to execute arbitrary commands and take control of the device...
LG Network Storage N1A1DD1 imgcopy.php has a remote command execution vulnerability
The LG Network Storage N1A1DD1 is a networked storage product NAS. The LG Network Storage N1A1DD1 imgcopy.php suffers from a remote command execution vulnerability that can be exploited by an attacker to execute arbitrary commands and take control of the device...
Oracle Fusion Middleware Unspecified Vulnerability in Fusion Middleware MapViewer Component
Oracle Fusion Middleware is Oracle's business innovation platform for enterprise and cloud environments that provides middleware, software collections, and other functionality. analysis development toolkit. An unspecified vulnerability exists in the Oracle Fusion Middleware Fusion Middleware...
UBUNTU-CVE-2018-3087
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
SLiMS 8 Akasia Stock Take Module Cross-Site Scripting Vulnerability
SLiMS 8 Akasia is an open source, free library management system.Stock Take module is one of the book inventory statistics module. A cross-site scripting vulnerability exists in the Stock Take module in SLiMS 8 Akasia version 8.3.1. A remote attacker can use...
CVE-2018-12658
Reflected Cross-Site Scripting XSS exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stocktake/index.php?keywords= URI...
CVE-2018-12658
Reflected Cross-Site Scripting XSS exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stocktake/index.php?keywords= URI...
CVE-2018-12658
Reflected Cross-Site Scripting XSS exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stocktake/index.php?keywords= URI...
CVE-2018-12658
Reflected Cross-Site Scripting XSS exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stocktake/index.php?keywords= URI...
CVE-2018-12658: Improper Neutralization of Input During Web Page Generation
Reflected Cross-Site Scripting XSS exists in the Stock Take module in SLiMS 8 Akasia 8.3.1 via an admin/modules/stocktake/index.php?keywords= URI...
PT-2018-11313
Name of the Vulnerable Software and Affected Versions SLiMS version 8.3.1 Description A Reflected Cross-Site Scripting XSS issue exists in the Stock Take module. This can be exploited via the /admin/modules/stock take/index.php?keywords= API endpoint, specifically through the keywords variable...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Installation Manager and IBM Packaging Utility. These issues were disclosed as part of the IBM Java SDK updates in January 2018. Vulnerability Details CVEID: CVE-2018-2579 DESCRIPTION: An unspecifie...
Microsoft Windows Remote Code Execution Vulnerability (CNVD-2018-11554)
Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems. A remote code execution vulnerability exists in...
Canon LBP7110Cw Authentication Bypass
Exploit Title: Canon LBP7110Cw - Authentication Bypass Date: 2018-06-07 Exploit Author: Huy Kha Vendor Homepage: http://global.canon.com Version: LBP7110Cw CVE: CVE-2018-12049 Severity: High Leads to full System Manager Mode account take-over Description : A remote attacker can bypass the...
U.S. Dept Of Defense: Code reversion allowing SQLI again in ███████
Summary: I just noticed that my publicly disclosed report, https://hackerone.com/reports/311922 is sstill vulnerable either a code reversion was made or something was done to revert the patch. Additionally I'd please request that the images in the report to be censored or redacted as it's been ma...
IBM Security Guardium Information Disclosure Vulnerability (CNVD-2018-09231)
IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardium, which stems...
PT-2018-19268
Name of the Vulnerable Software and Affected Versions CFITSIO affected versions not specified Description The issue allows a remote, unauthenticated attacker to take control of a server running the CFITSIO software. This affects all servers and products running the CFITSIO software. Recommendatio...
take-me-home.com XSS vulnerability
Open Bug Bounty ID: OBB-590466 Description| Value ---|--- Affected Website:| take-me-home.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
take-it.co.il XSS vulnerability
Open Bug Bounty ID: OBB-577838 Description| Value ---|--- Affected Website:| take-it.co.il Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...