DEBIAN-CVE-2018-8004

There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apache Traffic Server ATS. This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users...

UBUNTU-CVE-2018-8005

When there are multiple ranges in a range request, Apache Traffic Server ATS will read the entire object from cache. This can cause performance problems with large objects in cache. This affects versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x users should upgra...

Zoho ManageEngine ADManager Plus Cross-Site Scripting Vulnerability

ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...

Trend Micro Control Manager Path Traversal Vulnerability

Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. A directory traversal vulnerability exists in Trend Micro TMCM versions 6.0 and 7.0. A remote attacker could exploit the vulnerability to execute arbitrary code...

CVE-2017-1749

IBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remote attacker to traverse directories on the system. An unauthenticated attacker could alter UCD deployments. IBM X-Force ID: 135522...

SQL Injection Vulnerability in MetInfo Website Backend

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A SQL injection vulnerability exists in the backend of MetInfo version 6.1.0 website. An attacker can exploit this vulnerability to obtain sensitive database information...

Order Override Vulnerability in Rice CMS

DAMI CMS is an all-in-one system for pc and mobile site building. Rice CMS v6.0.0 suffers from an order override vulnerability, which can be exploited by an attacker to grab order packets and change prices in an order to purchase a company product...

CVE-2018-7070

HPE has identified a remote disclosure of information vulnerability in HPE CentralView Fraud Risk Management earlier than version CV 6.1. This issue is resolved in HF16 for HPE CV 6.1 or subsequent version...

Arbitrary File Read Vulnerability in Metinfo Version 6.0.0

MetInfo is a content management system developed using PHP and Mysql. An arbitrary file read vulnerability exists in Metinfo version 6.0.0. An attacker can exploit the vulnerability to read sensitive files on a website...

MetInfo Cross-Site Scripting Vulnerability (CNVD-2018-14100)

MetInfo is a content management system CMS developed using PHP and Mysql by China Mito Information Technology Ltd. A cross-site scripting vulnerability exists in MetInfo version 6.0.0. A remote attacker can inject arbitrary script or HTML by modifying the name of the navigation bar on the homepag...

IBM Rational Quality Manager Elevation of Privilege Vulnerability

IBM Rational Quality Manager RQM is a collaborative, Web-based quality management solution from IBM. The program provides test planning and test evaluation management methods within the entire software development lifecycle, and the ability to share information, automation to accelerate the proje...

CVE-2018-8928

Cross-site scripting XSS vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated users to inject arbitrary web script or HTML via the 1 familyname, 2 givenname, or 3 additionalname parameter...

CVE-2017-1651

IBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0.2 and 6.0 through 6.0.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...

Ivanti Avalanche Information Disclosure Vulnerability

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions 5.3 and 6.2. The vulnerability can be exploited by a...

Fortinet FortiOS Information Disclosure Vulnerability (CNVD-2018-13969)

Fortinet FortiOS is a set of security operating system developed by the U.S. Fiat Fortinet company dedicated to FortiGate network security platform. The system provides users with firewall, antivirus, IPSec/SSL VPN, Web content filtering and anti-spam and other security features. An information...

mao10cms Cross-site Script Injection Vulnerability

mao10cms is an open source content management system CMS developed using the PHP language. A cross-site scripting vulnerability exists in mao10cms version 6. Attackers can use the article page to inject arbitrary Web script or HTML...

mao10cms cross-site scripting vulnerability

mao10cms is an open source content management system CMS developed using the PHP language. A cross-site scripting vulnerability exists in version 6 of mao10cms. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of 'm=bbs&a=index' page...

CVE-2018-12696

mao10cms 6 allows XSS via the article page...

FastStone Image Viewer Denial of Service Vulnerability (CNVD-2018-14266)

FastStone Image Viewer is an image viewer that supports image browsing, format conversion, editing and more. A security vulnerability exists in FastStone Image Viewer version 6.2, which originates from the FSViewer.exe program failing to properly handle malformed JPEG files. An attacker can explo...

Mongoose Denial of Service Vulnerability

Cesanta Mongoose is a set of embedded server libraries from the Irish company Cesanta, which includes features such as TCP, HTTP client and server, WenSocket client and server. A security vulnerability exists in the 'mghandlecgi' function of the mongoose.c file in Cesanta Mongoose version 6.11. A...