Intel QuickAssist Technology for Linux Access Control Error Vulnerability

Intel QuickAssist Technology for Linux is a Linux-based data management technology from Intel Corporation that enhances the security and compression of dynamic and static data in cloud, network, big data and storage applications. An Access Control Error vulnerability exists in the driver stack in...

CVE-2018-2471

Under certain conditions SAP BusinessObjects Business Intelligence Platform 4.10 and 4.20 allows an attacker to access information which would otherwise be restricted...

SQL Injection Vulnerability in Five Fingers CMS v4.1.0

Five fingers CMS is a high-performance open source content management system , support for LNAMP architecture . Five Fingers CMS v4.1.0 SQL injection vulnerability exists , the vulnerability stems from the failure to filter ca.php file in the groupname parameter , an attacker can use the...

CVE-2018-15391

A vulnerability in certain IPv4 fragment-processing functions of Cisco Remote PHY Software could allow an unauthenticated, remote attacker to impact traffic passing through a device, potentially causing a denial of service DoS condition. The vulnerability is due to the affected software not...

DEBIAN-CVE-2018-16586

In Open Ticket Request System OTRS 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a logged in user opens it, the email could cause the browser to load external image or CSS resources...

UBUNTU-CVE-2018-16586

In Open Ticket Request System OTRS 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a logged in user opens it, the email could cause the browser to load external image or CSS resources...

MCMS Cross-Site Request Forgery Vulnerability

MCMS is a Java rapid development platform based on Spring, SpringMVC, Mybatis . A cross-site request forgery vulnerability exists in the ms/basic/manager/save.do file in MCMS version 4.6.5, which can be exploited by a remote attacker to add an administrator account...

CVE-2018-17366

An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do...

Simple POS SQL Injection Vulnerability

Simple POS is a sales system based on PHP and jQuery. The system supports tax calculation, printing receipts and supports barcode scanning. An SQL injection vulnerability exists in the administration panel in Simple POS version 4.0.24. A remote attacker can exploit the vulnerability by sending th...

CScms Remote Code Execution Vulnerability

CScms is a content management system CMS developed on a CI framework. A security vulnerability exists in CScms version 4.1. A remote attacker can exploit the vulnerability to execute code...

Cybozu Garoon vulnerable to directory traversal

Overview Cybozu Garoon provided by Cybozu, Inc. contains a directory traversal vulnerability CWE-22 due to a flaw in processing of the session information. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated und...

Ice Qube Thermal Management Center Information Disclosure Vulnerability

Ice Qube Thermal Management Center is a thermal management application from Ice Qube USA. The program includes features such as email notifications, remote management, LCD display and temperature alarms. An information disclosure vulnerability exists in Ice Qube Thermal Management Center versions...

CVE-2018-15483

An issue was discovered on KONE Group Controller KGC devices before 4.6.5. Denial of Service can occur through the open HTTP interface, aka KONE-04...

CVE-2018-16663

An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in parserelations in os/storage/antelope/aql-parser.c while parsing AQL storage of relations...

Dell EMC RSA BSAFE Micro Edition Suite Integer Overflow Vulnerability

Dell EMC RSA BSAFE Micro Edition Suite MES is an encryption toolkit from Dell USA. The toolkit can help developers achieve stable and secure application design. An integer overflow vulnerability exists in Dell EMC RSA BSAFE MES version 4.1.6. A remote attacker could exploit this vulnerability to...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2019-09139)

WUZHI CMS is five fingers WUZHI company based on PHP and MySQL open source content management system CMS. WUZHI CMS 4.1.0 there is a cross-site scripting vulnerability, attackers can use the vulnerability through the index.php?m=link&f=index&v=add formmark parameter to carry out cross-site...

PT-2018-3976 · Xpdf +2 · Xpdf +2

Name of the Vulnerable Software and Affected Versions: Xpdf version 4.00 Description: The issue is related to errors in the code of the Xpdf software, specifically in the XRef::fetch function in XRef.cc. It allows remote attackers to cause a denial of service, which is a stack consumption, via a...

CVE-2018-16142

PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/logincontrol.php via the back parameter to the okf function...

SAP BusinessObjects Business Intelligence Platform Admin Tools Information Disclosure Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product features report generation, analysis, data visualization, etc. Admin Tools is one of the management tools. An information disclosure...

UBUNTU-CVE-2018-10938

A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipsov4optptr function in net/ipv4/cipsoipv4.c leading to a denial-of-service. A certain non-default...