Command injection

On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 and Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface TMUI, also referred to as the BIG-IP Configuration utility, restrictions on...

CVE-2017-8950

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

UBUNTU-CVE-2017-13885

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote...

CVE-2017-13865

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted...

Apple iOS CVE-2017-7152 Address Bar Spoofing Vulnerability

Description Apple iOS is prone to an address bar spoofing vulnerability. An attacker may exploit this issue to spoof the originating URL of a trusted web site. This may allow a remote attacker to carry out phishing-style attacks. Versions prior Apple iOS 11.2 are vulnerable. Technologies Affected...

WordPress Bridge theme cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.Bridge theme is one of the Wordpress themes. A cross-site scripting vulnerability exists in WordPress Bridge theme 11.2 an...

Unspecified Vulnerability in Oracle GoldenGate (CNVD-2016-00778)

Oracle GoldenGate is the United States Oracle Oracle company for the realization of heterogeneous IT environments between the log-based real-time changes in data capture and delivery of a comprehensive software package, which supports the capture, operation and analysis of data replication betwee...

Oracle Sun Solaris Kernel IDMap Subcomponent Denial of Service Vulnerability

Oracle Sun Solaris is a set of Unix-like operating systems from Oracle. A security vulnerability exists in the Kernel IDMap subcomponent in Oracle Sun Solaris version 11.2. A remote attacker could exploit this vulnerability to cause a denial of service...

TCExam 11.2.x - admincodetce_edit_answer.php Multiple SQL Injections

TCExam 11.2.x - admincodetceeditanswer.php Multiple SQL Injections source: https://www.securityfocus.com/bid/54861/info TCExam is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

Progea Movicon 'TCPUploadServer.exe' Multiple Vulnerabilities

Progea Movicon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amaya 11.1 XHTML Buffer Overflow

=cicatriz ==advisories= / / / / // / / // / o / / .-/ =Amaya 11.1 XHTML Parser Buffer Overflow==/= == =Advisory & Vulnerability Information=== Title: Amaya 11.1 XHTML Parser Buffer Overflow Advisory ID: VUDO-2009-0104 Advisory URL: http://research.voodoo-labs.org/advisories/2 Date founded:...