CVE-2016-9804

In BlueZ 5.42, a buffer overflow was observed in "commandsdump" function in "tools/parser/csr.c" source file. The issue exists because "commands" array is overflowed by supplied parameter due to lack of boundary checks on size of the buffer from frame "frm-ptr" parameter. This issue can be...

CVE-2016-2955

Cross-site scripting XSS vulnerability in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-3057

Cross-site scripting XSS vulnerability in IBM Sterling B2B Integrator 5.2 before 502050014 and 5.2 06 before 50206021 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-3002

IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client device...

VMware vSphere Client XML External Entity Information Disclosure Vulnerability

VMware vSphere is a virtualization platform for building cloud computing infrastructures from VMware that simplifies IT operations by separating applications and operating systems from the underlying hardware.VMware vSphere Client is a client software for VMware vSphere. An XML external entity...

IBM Connections Information Disclosure Vulnerability (CNVD-2016-11535)

IBM Connections is a suite of social software platforms from IBM in the United States. The platform provides advanced analytics and real-time data monitoring capabilities, and accelerates web collaboration within and outside the organization through IBM SmartCloud services. An information...

SAP Hybris Management Console HTML Injection Vulnerability

SAP Hybris Management Console HMC is a suite of enterprise-class multichannel e-commerce and product content management PCM software from SAP. An HTML injection vulnerability exists in SAP HMC version 5.6, which stems from the program failing to adequately filter user-submitted input. An attacker...

SAP Console HTML Injection Vulnerability

SAP Console is a set of distribution components from SAP that supports the connection of exchange information within the SAP system. An html injection vulnerability exists in SAP Hybris Management Console version 5.6. An attacker could exploit this vulnerability to execute arbitrary script code i...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2016-09890)

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A remote denial of service vulnerability exists in the Server: Performance Schema subcomponent of the MySQL Server component ...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2016-09902)

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A remote denial of service vulnerability exists in the Security: Audit subcomponent of the MySQL Server component in Oracle...

Unspecified Vulnerability in Oracle Virtualization Secure Global Desktop (CNVD-2016-10287)

Oracle Virtualization is a suite of virtualization solutions from Oracle Corporation. The solution is used to unify the management of the entire hardware and software architecture from applications to disk, enabling virtualization from the desktop to the data center.Oracle Secure Global Desktop S...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2016-09891)

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A remote denial of service vulnerability exists in the Server: RBR subcomponent of the MySQL Server component in Oracle MySQL...

SQL Injection Vulnerability in KuaiFanCMS File /upload/kuaifan/module/xinxi/shoujian.module.php

KuaiFanCMS V5.x is developed with PHP5+MYSQL as the technical base. kf is built with Smarty template engine. KuaiFanCMS file /upload/kuaifan/module/xinxi/shoujian.module.php at the existence of SQL injection vulnerability, an attacker can use this vulnerability to obtain sensitive database...

PT-2016-7899 · Oracle +7 · Mysql Server +6

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.56 and earlier MySQL Server versions 5.6.36 and earlier MySQL Server versions 5.7.18 and earlier Description: The issue allows a low privileged attacker with network access via multiple protocols to compromise MySQL...

Command Execution Vulnerability in Metinfo 5.3.10 CMS Latest Version

MetInfo is an enterprise website building software that supports multi-terminal display and is easy to use. A command execution vulnerability exists in the latest version of Metinfo 5.3.10 CMS, which can be exploited by attackers to execute arbitrary commands...

IBM Sterling B2B Integrator Password Change Vulnerability

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A password change vulnerability exists in IBM Sterling B2B...

CVE-2016-5946

Directory traversal vulnerability in IBM Spectrum Control formerly Tivoli Storage Productivity Center 5.2.x before 5.2.11 allows remote authenticated users to read arbitrary files via a .. dot dot in a URL...

Coupon CMS URL Redirection Vulnerability

Coupon CMS is an open source PHP coupon system. The system supports the setup of chargeable coupons , which can effectively increase the income of the site . A URL redirection vulnerability exists in Coupon CMS version 5.00, as the program fails to adequately filter user-submitted input. A remote...

ADOdb SQL Injection Vulnerability

ADOdb is an intermediate component for PHP programs to access the database . A SQL injection vulnerability exists in version 5.x of ADOdb. An attacker could use this vulnerability to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying database...

Dentsply Sirona CDR DICOM Hardcoded Credentials Security Bypass Vulnerability

Dentsply Sirona CDR DICOM is a software package for managing medical dental records. A security vulnerability exists in Dentsply Sirona CDR DICOM 5 and prior versions, which stems from the program containing hard-coded database credentials. A remote attacker could exploit the vulnerability to gai...