CVE-2018-11153

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 11 of 46...

Arbitrary file deletion vulnerability in emlog version 5.3.1

emlog is a powerful blog and CMS builder based on PHP and MySQL. An arbitrary file deletion vulnerability exists in emlog version 5.3.1. The vulnerability is caused by the program not filtering parameters. An attacker can use this vulnerability to delete arbitrary files or directories...

NetIQ iManager Communication Downgrade Attack Vulnerability

NetIQ iManager is a WEB-based application from American NetIQ. You can use wireless devices to manage and configure eDirectory objects. A security vulnerability exists in NetIQ iManager versions prior to 3.1. An attacker can exploit this vulnerability to perform a degradation attack...

CVE-2018-1347

The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting...

Micro Focus Privileged Account Manager Information Disclosure Vulnerability

Micro Focus Privileged Account Manager PAM is a privileged user management solution from Micro Focus UK. The solution protects privileged account access to databases, applications and clouds. A security vulnerability exists in Micro Focus PAM versions 3.2 and 3.1. An attacker could exploit the...

YxtCMF SQL Injection Vulnerability

YxtCMF is an online learning system. The system has functions such as online live broadcast, online question and answer, teacher management and forum. A SQL injection vulnerability exists in the ShitiController.class.php file in YxtCMF version 3.1. A remote attacker can exploit this vulnerability...

QNAP Qfinder Pro Information Disclosure Vulnerability

QNAP Qfinder Pro is a suite of software from China Weilian QNAP Systems for quickly searching for QNAP NAS devices on your LAN. A security vulnerability exists in QNAP Qfinder Pro 6.1.0.0317 and earlier versions. An attacker could exploit the vulnerability to obtain sensitive information on a NAS...

Atlassian Bamboo Cross-Site Scripting Vulnerability (CNVD-2018-05516)

Atlassian Bamboo is a suite of continuous integration build tools from Atlassian Australia. The tools help development teams build, test, release and deploy projects using continuous delivery capabilities. A cross-site scripting vulnerability exists in the ignupUser resource in Atlassian Bamboo...

Atlassian Bamboo Cross-Site Request Forgery Vulnerability

Atlassian Bamboo is a suite of continuous integration build tools from Atlassian Australia. The tools help development teams build, test, release and deploy projects using continuous delivery capabilities. A cross-site request forgery vulnerability exists in the update user administration resourc...

Atlassian Bamboo Cross-Site Request Forgery Vulnerability (CNVD-2018-05464)

Atlassian Bamboo is a suite of continuous integration build tools from Atlassian Australia. The tools help development teams build, test, release and deploy projects using continuous delivery capabilities. A cross-site request forgery vulnerability exists in the saveConfigureSecurity resource in...

UBUNTU-CVE-2018-5764

The parsearguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism...

MSA vot.Ar 'parse' function unauthorized operation vulnerability

MSA vot.Ar is a suite of voting election applications. A security vulnerability exists in the 'parse' function in MSA vot.Ar version 3.1. An attacker in close physical proximity could exploit this vulnerability to cast multiple votes for a candidate with the help of a specially designed RFID voti...

Apache Traffic Server Remote Code Execution Vulnerability

Apache Traffic Server is the United States Apache Apache Software Foundation of an efficient , scalable HTTP proxy and caching server . A security vulnerability exists in the HTTP/2 experimental feature of Apache Traffic Server versions 5.3.x prior to 5.3.1. A remote attacker can exploit this...

CloudBees Jenkins Git Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed tasks . Git Plugin is one of the plug-ins used to manage the...

CVE-2017-2222

Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-9543

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to reset arbitrary passwords via a crafted POST request to registresult.htm...

SolarWinds Log & Event Manager Security Bypass Vulnerability

SolarWinds Log and Event Manager LEM is a log and event manager from SolarWinds, Inc. that provides real-time log analysis, memory event correlation, and threat attack response. A security vulnerability exists in SolarWinds LEM versions prior to 6.3.1 Hotfix 4. An attacker could exploit the...

SolarWinds Log and Event Manager Command Execution Vulnerability

SolarWinds Log and Event Manager LEM is a log and event manager from SolarWinds, Inc. that provides real-time log analysis, memory event correlation, and threat attack response. A security vulnerability exists in SolarWinds LEM versions prior to 6.3.1 Hotfix 4. An attacker can exploit the...

CVE-2016-4693

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Security" component, which makes it easier for attackers to bypass cryptographic protection mechanisms by leveraging use of t...

CVE-2016-4669

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows local users to execute arbitrary code in a privileged context or...