CVE-2018-15613

A cross-site scripting XSS vulnerability in the Runtime Config component of Avaya Aura Orchestration Designer could result in malicious content being returned to the user. Affected versions of Avaya Aura Orchestration Designer include all versions up to 7.2.1...

SQL Injection Vulnerability in PbootCMS v1.2.1

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS v1.2.1 suffers from SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

baigo CMS Cross-Site Request Forgery Vulnerability

baigo CMS is an open source PHP-based content management system CMS. A cross-site request forgery vulnerability exists in the index.php?m=article&c=request page in baigo CMS version 2.1.1, which can be exploited by remote attackers to publish arbitrary articles...

HPE Network Function Virtualization Director Information Disclosure Vulnerability

HPE Network Function Virtualization Director NFVD is a suite of NFV orchestration solutions from Hewlett Packard Enterprise HPE, USA. It is designed to automate the management of end-to-end services across VNFs, VNF forwarding maps, and network services NS. An information disclosure vulnerability...

Charles Proxy Local Elevation of Privilege Vulnerability

Charles Proxy is an HTTP monitor that looks at all HTTP traffic between your computer and the Intel. A local elevation of privilege vulnerability exists in the Charles Proxy Settings suid binary in versions of Charles Proxy prior to 4.2.1. A local attacker can exploit this vulnerability to gain...

Subrion cross-site scripting vulnerability (CNVD-2018-14782)

Subrion CMS is a PHP-based content management system CMS developed by the Subrion team. The system can be integrated into a website and supports a wide range of extensions plug-ins and more. A cross-site scripting vulnerability exists in uploads/.htaccess in Subrion CMS version 4.2.1, which stems...

Micro Focus SUSE open build service unauthorized source access vulnerability

Micro Focus SUSE open build service OBS is a software distribution system from Micro Focus UK. The system builds and distributes software packages from source code in an automated, consistent and repeatable manner. A security vulnerability exists in Micro Focus SUSE OBS versions 2.1 through 2.1.1...

UBUNTU-CVE-2011-4181

A vulnerability in open build service allows remote attackers to gain access to source files even though source access is disabled. Affected releases are SUSE open build service up to and including version 2.1.15 for 2.1 and before version 2.3...

PT-2018-5676 · Mysql Server · Mysql Multi-Master Replication Manager

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the MMM::Agent::Helpers::Network::send arp function, resulting in arbitrary comma...

PT-2018-5671 · Mysql Server · Mysql Multi-Master Replication Manager (Mmm) Mmm Agentd

Name of the Vulnerable Software and Affected Versions: MySQL Multi-Master Replication Manager MMM mmm agentd version 2.2.1 Description: A specially crafted MMM protocol message can cause a shell command injection in the add ip function, resulting in arbitrary command execution with the privileges...

UBUNTU-CVE-2018-1059

The DPDK vhost-user interface does not check to verify that all the requested guest physical range is mapped and contiguous when performing Guest Physical Addresses to Host Virtual Addresses translations. This may lead to a malicious guest exposing vhost-user backend process memory. All versions...

CVE-2018-2852

Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications subcomponent: Base. Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

PT-2018-1302 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software versions 6.2.1 through 6.2.2 Description: A vulnerability in the internal packet-processing functionality could allow an unauthenticated, remote attacker to cause an affected device to stop processi...

iScripts EasyCreate cross-site scripting vulnerability (CNVD-2018-08315)

IScripts EasyCreate is a set of online website builder from Iscripts, Inc. The tool can be used on the server for the client to provide website building services , belong to the fully customizable . A cross-site scripting vulnerability exists in the Site title field in IScripts EasyCreate version...

CVE-2018-3822

X-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack via incorrect XML canonicalization and DOM traversal. An attacker might have been able to impersonate a legitimate user if the SAML Identity Provider allows for self registration with arbitrary...

GLPI Remote Code Execution Vulnerability

GLPI is an open source IT resource management suite maintained by the Indepnet Association. The suite includes features such as device status management, asset inventory storage, management processes and work log management. A security vulnerability exists in GLPI 9.2.1 and earlier versions. A...

CVE-2018-2607

Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications subcomponent: Base. The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality Gue...

CVE-2017-16666

Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the name of an uploaded PCAP file. NOTE: this issue can be exploited without authentication by leveraging the user registration feature...

Apple iOS and tvOS HomeKit Security Bypass Vulnerability

Apple iOS and tvOS are both products of the American company Apple. The former is an operating system for mobile devices; the latter is an operating system for smart TVs, of which HomeKit is a smart home platform component. A security bypass vulnerability exists in the HomeKit component in Apple...

NetApp OnCommand Unified Manager Unauthorized Operation Vulnerability

NetApp OnCommand Unified Manager is a set of ONTAP system management software from the U.S. company NetApp. The software can simplify data management, monitoring storage system infrastructure and detect faults. A security vulnerability exists in NetApp OnCommand Unified Manager versions prior to...