CVE-2018-1000132: Incorrect Permission Assignment for Critical Resource

Mercurial version 4.5 and earlier contains a Incorrect Access Control CWE-285 vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in 4.5.1...

PT-2018-1893

Name of the Vulnerable Software and Affected Versions Mercurial versions prior to 4.5.1 Description The issue is related to incorrect access control in the protocol server, which can lead to unauthorized data access. This can be exploited via network connectivity, potentially allowing a remote...

FineCMS v5.2.0 SQL注入

在/finecms/dayrui/controllers/Api.php第45行： template-cron = 0; $GET'page' = max1, int$this-input-get'page'; $params = drstring2arrayurldecode$this-input-get'params'; $params'get' = @jsondecodeurldecode$this-input-get'get', TRUE; $this-template-assign$params; $name = strreplacearray'\', '/', '..',...

Solaris 10 (sparc) : 150157-01

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Remote Procedure Call RPC. Supported versions that are affected are 8, 9, 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can...

PT-2018-17963

Name of the Vulnerable Software and Affected Versions Pelco Sarix Professional versions prior to 3.29.67 Description A XML external entity XXE vulnerability exists in the import.cgi of the web interface component. This issue may allow unauthorized access to sensitive data. Recommendations For...

PT-2018-8355

Name of the Vulnerable Software and Affected Versions Drupal versions 8.4.x before 8.4.5 Description The issue allows users to update certain data without proper permissions, specifically affecting the Settings Tray module. If a Settings Tray form is implemented in a custom or contrib module,...

PT-2018-17580

Name of the Vulnerable Software and Affected Versions Micro Focus Project and Portfolio Management Center version 9.32 Description The issue is related to an XML External Entity XXE vulnerability, which can be exploited to allow XXE. Recommendations For version 9.32, update to a version that...

CVE-2017-5801

A Remote Unauthorized Access to Data vulnerability in HPE Business Process Monitor version v09.2x, v09.30 was found...

CVE-2017-5786

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

CVE-2017-5786

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

Code injection

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

CVE-2017-5786

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

CVE-2017-5786: Undefined Security Weakness

A local Unauthorized Data Modification vulnerability in HPE OfficeConnect Network Switches version PT.02.01 including PT.01.03 through PT.01.14...

PT-2018-5014

Name of the Vulnerable Software and Affected Versions HPE Helion Eucalyptus versions 4.3.0 and earlier Description The issue arises from incorrect permission checks for IAM users accessing versioned objects and ACLs. As a result, authenticated users with S3 permissions may also be able to access...

PT-2018-8271

Name of the Vulnerable Software and Affected Versions: HPE OfficeConnect Network Switches versions PT.01.03 through PT.01.14 HPE OfficeConnect Network Switches version PT.02.01 Description: A local Unauthorized Data Modification issue exists. Recommendations: For HPE OfficeConnect Network Switche...

Vulnerability in Oracle E-Business Suite Oracle Marketing

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software, of which Oracle Marketing is a component for managing marketing-related information and processes. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Oracle E-Business Suite Oracle Marketing is vulnerable (CNVD-2018-03936)

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software, of which Oracle Marketing is a component for managing marketing-related information and processes. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Oracle E-Business Suite Oracle Marketing is vulnerable (CNVD-2018-03938)

Oracle E-Business Suite E-Business Suite is Oracle's fully integrated suite of global business management software, of which Oracle Marketing is a component for managing marketing-related information and processes. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Unspecified Vulnerability in Oracle Communications Order and Service Management Component

Oracle Communications is a suite of Oracle applications for rapidly delivering and monetizing digital life communications.Oracle Communications Order and Service Management is one of the components used to coordinate activities between internal BOSS systems. Oracle Communications Order and Servic...

Unspecified Vulnerability in Oracle Communications Unified Inventory Management Component (CNVD-2018-01728)

Oracle Communications is a suite of applications from Oracle Corporation for rapidly delivering and monetizing digital life communications.Oracle Communications Unified Inventory Management is one of the unified inventory management components. A security vulnerability exists in the Portal...