Unspecified Vulnerability in Oracle Virtualization Secure Global Desktop (CNVD-2016-10287)

Oracle Virtualization is a suite of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the desktop to the data center.Oracle Secure Global Desktop S...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2016-09902)

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A remote denial of service vulnerability exists in the Security: Audit subcomponent of the MySQL Server component in Oracle...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2016-09891)

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A remote denial of service vulnerability exists in the Server: RBR subcomponent of the MySQL Server component in Oracle MySQL...

SQL Injection Vulnerability in KuaiFanCMS File /upload/kuaifan/module/xinxi/shoujian.module.php

KuaiFanCMS V5.x is developed with PHP5+MYSQL as the technical base. kf is built with Smarty template engine. KuaiFanCMS file /upload/kuaifan/module/xinxi/shoujian.module.php at the existence of SQL injection vulnerability, an attacker can use this vulnerability to obtain sensitive database...

PT-2016-7899 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.56 and earlier MySQL Server versions 5.6.36 and earlier MySQL Server versions 5.7.18 and earlier Description: The issue allows a low privileged attacker with network access via multiple protocols to compromise MySQL...

Command Execution Vulnerability in Metinfo 5.3.10 CMS Latest Version

MetInfo is an enterprise website building software that supports multi-terminal display and is easy to use. A command execution vulnerability exists in the latest version of Metinfo 5.3.10 CMS, which can be exploited by attackers to execute arbitrary commands...

IBM Sterling B2B Integrator Password Change Vulnerability

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A password change vulnerability exists in IBM Sterling B2B...

CVE-2016-5946

Directory traversal vulnerability in IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. dot dot in a URL...

Coupon CMS URL Redirection Vulnerability

Coupon CMS is an open source PHP coupon system. The system supports the setup of chargeable coupons , which can effectively increase the income of the site . A URL redirection vulnerability exists in Coupon CMS version 5.00, as the program fails to adequately filter user-submitted input. A remote...

ADOdb SQL Injection Vulnerability

ADOdb is an intermediate component for PHP programs to access the database . A SQL injection vulnerability exists in version 5.x of ADOdb. An attacker could use this vulnerability to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying database...

Dentsply Sirona CDR DICOM Hardcoded Credentials Security Bypass Vulnerability

Dentsply Sirona CDR DICOM is a software package for managing medical dental records. A security vulnerability exists in Dentsply Sirona CDR DICOM 5 and prior versions, which stems from the program containing hard-coded database credentials. A remote attacker could exploit the vulnerability to gai...

PHP 5.0.0 'xmldocfile()' Local Denial of Service Vulnerability

PHP is a new language for writing CGI programs. A local denial of service vulnerability exists in PHP 5.0.0 'xmldocfile', which can be exploited by an attacker to launch a denial of service attack...

Fortinet FortiClient SSLVPN Local Information Disclosure Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. A local information disclosure vulnerability exists in Fortinet FortiClient SSLVPN version 5.4, which could be exploited by attackers to obtain sensitive informati...

AlienVault OSSIM and USM Cross-Site Scripting Vulnerabilities

AlienVault OSSIM and USM are both products of AlienVault Corporation, U.S.A. OSSIM is an open source security information management system. USM is a security management platform that provides security monitoring, security event management and reporting, and threat awareness system. A cross-site...

dreammail Mail Client - Address Book XSS Vulnerability

DreamMail is a professional e-mail client software for sending, receiving and managing e-mail. The Dreammail Ver 5.16.1005.1016 version of the email client suffers from a stored cross-site scripting vulnerability. Allows an attacker to insert malicious js code into a page, causing a stored...

Multiple vulnerabilities in ZOHO WebNMS Framework (CNVD-2016-06372)

ZOHO WebNMS Framework is the United States ZhuoHao ZOHO company's set of framework for building network management applications. A directory traversal vulnerability, an information disclosure vulnerability, and a user impersonation vulnerability exist in versions 5.2 and 5.2 SP1 of the ZOHO WebNM...

Adobe Experience Manager Information Disclosure Vulnerability (CNVD-2016-06215)

Adobe Experience Manager is an enterprise content management solution that helps you streamline the management and delivery of your content and assets. An information disclosure vulnerability exists in the Backup feature of Adobe Experience Manager 5.6.1, 6.0, 6.1, 6.2, which can be exploited by...

PT-2016-5361 · Red Hat · Red Hat Satellite

Name of the Vulnerable Software and Affected Versions: Red Hat Satellite version 5.7 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the RHNMD User or Filesystem parameters, related to the display of monitoring probes...

CVE-2016-1465

Cisco Nexus 1000v Application Virtual Switch AVS devices before 5.21SV31.5i allow remote attackers to cause a denial of service ESXi hypervisor crash and purple screen via a crafted Cisco Discovery Protocol packet that triggers an out-of-bounds memory access, aka Bug ID CSCuw57985...

mysql: unspecified vulnerability related to Server:Parser (CPU October 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Parser...