The vulnerability of the implementation of the getClass method in the CookieInterceptor class of the Apache Struts software framework allows a hacker to gain access to read, modify, or delete data.

The vulnerability of the CookieInterceptor class implementation in the Apache Struts software platform is related to deficiencies in access control when processing the cookiesName parameter with the symbol “”. Exploiting this vulnerability can allow an attacker to gain access to, read, modify, or...

OpenAFS Multiple Vulnerabilities - 01 - Windows

OpenAFS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openafs:openafs"; ifdescription...

Unspecified Vulnerability in Oracle WebLogic WLS Core Component (CNVD-2016-00564)

Oracle WebLogic server is an application server platform for building and running enterprise applications and services. An unspecified vulnerability in the WLS Core component inside Oracle WebLogic allows remote attackers to conduct denial-of-service attacks by exploiting the vulnerability to gai...

Unspecified Vulnerability in Oracle WebLogic WLS Core Component

Oracle WebLogic server is an application server platform for building and running enterprise applications and services. An unspecified vulnerability in the WLS Core component of Oracle WebLogic allows remote attackers to exploit the vulnerability to gain unauthorized access to data, modify it, an...

Unspecified Vulnerability in Oracle PeopleSoft HCM Global Payroll Switzerland Security Component

Oracle PeopleSoft is a suite of enterprise human capital management solutions. An unspecified vulnerability in the Oracle PeopleSoft HCM Global Payroll Switzerland Security component allows remote attackers to exploit the vulnerability to gain unauthorized access to data, resulting in the...

The vulnerability of the Oracle Fusion Middleware software allows a perpetrator to gain unauthorized access to read data.

The vulnerability of the Oracle HTTP Server component of the Oracle Fusion Middleware software is related to errors in the code. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to read data...

The vulnerability of the Oracle Fusion Middleware software allows a perpetrator to gain unauthorized access to read data.

The vulnerability of the Oracle GlassFish Server software component of the Oracle Fusion Middleware framework is related to errors in the code. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to read data...

The vulnerability of the Oracle E-Business Suite system’s automation activities allows a perpetrator to gain unauthorized access to read data.

The vulnerability of the Oracle Applications component in Oracle E-Business Suite systems, which is part of the enterprise automation system, is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to read data...

CVE-2015-6303

CVE-2015-6303 concerns the Cisco Spark mobile app (2015-07-04 build) where SSL/TLS certificate validation is flawed. The root cause is improper verification of X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and access sensitive information via a crafte...

Symantec Ghost Out-of-Bounds Indexing Remote Code Execution Vulnerability

Symantec Ghost Explorer Utility is GHO file browsing tool. Symantec Ghost has an out-of-bounds indexing remote code execution vulnerability that can be exploited by an attacker to cause a denial of service or access unauthorized data...

Symantec Endpoint Protection Manager and Client Issues

SUMMARY Symantec Endpoint Protection SEP 12.1.6 addresses vulnerabilities that were found in prior releases. These include an authorized but less-privileged administrator able to attempt a blind SQL injection in the SEP Manager SEPM console through PHP prepared statements; a local Denial of Servi...

Multiple Vulnerabilities in Cisco Unified Communications Manager

Cisco Unified Communications Manager is a call processing component of a Cisco IP telephony solution. A cross-site scripting and cross-site request forgery vulnerability exists in Cisco Unified Communications Manager. An unauthenticated, remote attacker could use this vulnerability to execute...

ReviewPost 2.84 - Multiple Vulnerabilities

ReviewPost 2.84 - Multiple Vulnerabilities ReviewPost Multiple Vulnerabilities Vendor: All Enthusiast, Inc. Product: ReviewPost Version: = 2.84 Website: http://www.reviewpost.com/ BID: 12159 CVE: CVE-2005-0270 CVE-2005-0271 CVE-2005-0272 OSVDB: 12703 12704 12705 12706 12707 12708 SECUNIA: 13697...

HP Color LaserJet security vulnerabilities

Unauthorized data access, DoS...

Sigma ISP Manager 6.6 Sigmaweb.DLL SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13640/info Sigma ISP Manager is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to using it in an SQL query. Successful exploitatio...

PHP Forge <= 3 beta 2 (id) Remote SQL Injection Vulnerability

No description provided by source. ========================================================= =============== JIKI TEAM Maroc And YameN =============== ========================================================= Author : jiko email : [email protected] Home : www.no-back.org Script : Forge 3.0 bêta...

Mail.ru: XXE and SSRF on webmaster.mail.ru

SSRF request: POST /domain/metadata HTTP/1.1 Host: webmaster.mail.ru User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.9; rv:29.0 Gecko/20100101 Firefox/29.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip, deflate...

PT-2014-2022 · Oracle +10 · Mysql Server +9

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.32 and prior MySQL Server versions 8.0.22 and prior Description: The issue exists due to insufficient input validation in the Information Schema component of MySQL Server. This allows a remote attacker to gain...

Ecmall 2. x version exist through the kill SQL injection vulnerability-vulnerability warning-the black bar safety net

Brief description: Originally wanted to complete analysis and then struggle ECSHOP...the result has not been to old cassock opportunity to Ah,more and more can't believe is not the official version,is not under the wrong. Drink more the head a little dizzy. I don't know if the analysis is written...

Z-Blog php Edition front regular SQL blind injection vulnerability-vulnerability warning-the black bar safety net

Brief description: The second...also a bit puzzled want to ask your developer Detailed description: The problem /zbsystem/function/csystemcommon.php function GetVars$name,$type='REQUEST' if $type=='ENV' $array=&$ENV; if $type=='GET' $array=&$GET; if $type=='POST' $array=&$POST; if $type=='COOKIE'...