Trend Micro Threat Discovery Appliance Arbitrary Code Execution Vulnerability (CNVD-2017-06832)

The Trend Micro Threat Discovery Appliance TDA is a threat discovery appliance with integrated cloud security technology from Trend Micro. The appliance provides detection of malicious activity at the network layer, threat management services, and threat analysis and reporting. A security...

Linux kernel information disclosure vulnerability (CNVD-2017-06740)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. The driver /media/video/videobuf-vmalloc.c does not initialize the videobufmapping data structure in Linux kernels prior to 2.6.24 An information disclosure vulnerability...

Symphony cross-site scripting vulnerability (CNVD-2017-04650)

Symphony is a content management system CMS developed using PHP and MySQL. The system supports search engine optimization, module extensions and more. A cross-site scripting vulnerability exists in publish/notes/edit//saved/URI in Symphony version 2.6.9. An attacker can exploit this vulnerability...

CVE-2016-6103

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2017-3412

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-3373

Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2017-3795

A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct arbitrary password changes against any non-administrative user. More Information: CSCuz03345. Known Affected Releases: 2.6. Known Fixed Releases: 2.7.1.12...

IBM License Metric Tool and BigFix Inventory Information Disclosure Vulnerability (CNVD-2017-00066)

The IBM License Metric Tool and BigFix Inventory are both products of IBM Corporation of America. The former is a set of free tools that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU licensing needs, and the latter is a soluti...

CVE-2016-5589

Unspecified vulnerability in the Oracle CRM Technical Foundation component in Oracle E-Business Suite 12.1.1 through 12.1.3 and 12.2.3 through 12.2.6 allows remote attackers to affect confidentiality and integrity via unknown vectors...

Cisco WebEx Meetings Server Command Injection Vulnerability (CNVD-2016-07731)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A command injection vulnerability exists in CWMS version 2.6. A remote attacker can exploit this vulnerability to...

CVE-2016-1482

Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID CSCuy83130...

SQL Injection Vulnerability in TUTUCMS Order Parameter

TUTUCMS is a CMS image management system focused on the development of image-based websites. TUTUCMS x2.6 version has a SQL injection vulnerability, due to the system does not strictly filter order parameters, only the source code to do the corresponding code audit. Allow attackers to exploit the...

Cisco WebEx Meetings Server SQL Injection Vulnerability

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A SQL injection vulnerability exists in CWMS version 2.6. A remote attacker can exploit this vulnerability to execu...

Cisco WebEx Meetings Server Cross-Site Scripting Vulnerability (CNVD-2016-04942)

Cisco WebEx Meetings Server CWMS is the United States Cisco Cisco WebEx meeting program in a set of multifunctional meeting solutions that include audio, video and Web conferencing. A cross-site scripting vulnerability exists in Cisco WebEx Meetings Server CWMS version 2.6. A remote attacker can...

Vulnerabilities in the Debian GNU/Linux operating system that allow a local malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kernel-image-2.6-386 operating system of the Debian GNU/Linux distribution may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kernel-headers-2.6.8-3-686-smp operating system of the Debian GNU/Linux distribution can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

appleple a-blog cms unauthorized operation vulnerability

appleple a-blog cms is a content management system CMS from appleple Japan. A security vulnerability exists in the session management of the comment feature in appleple a-blog cms 2.6.0.1 and earlier versions. A remote attacker can exploit this vulnerability to delete arbitrary comments or obtain...

Grassroots DICOM (GDCM) Buffer Overflow Vulnerability

Grassroots DICOM GDCM is a C++ library for processing DICOM medical images. A buffer overflow vulnerability exists in Grassroots DICOM GDCM versions prior to 2.6.0 and 2.6.1, which could be exploited by an attacker to perform a remote code attack...

PT-2016-3900 · Grassroots · Grassroot Dicom

Name of the Vulnerable Software and Affected Versions: Grassroots DICOM versions prior to 2.6.2 Description: The issue allows remote attackers to obtain sensitive information from process memory or cause a denial of service via an embedded JPEG-LS image with dimensions larger than the selected...

IBM Security QRadar SIEM Cross-Site Scripting Vulnerability

IBM Security QRadar SIEM is an IBM USA solution that consolidates log-sourced event data from thousands of devices and applications dispersed throughout the network. The solution stores each event in its raw form and then performs instant correlation of events to differentiate between actual...