2953 matches found
Microsoft Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-24387)
Microsoft Team Foundation Server is a source code management, project management and team collaboration platform within the Application Lifecycle Management ALM suite of tools from Microsoft. The platform helps teams collaborate more flexibly and effectively and deliver high-quality software more...
Bootstrap Cross-Site Scripting Vulnerability (CNVD-2019-23270)
Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in affix in Bootstrap versions prior to 3.4.0, which can be exploited by remote attackers to inject arbitrary web script or HTML...
CVE-2019-0249
Under certain conditions SAP Landscape Management VCM 3.0 allows an attacker to access information which would otherwise be restricted...
CVE-2018-20602
Lei Feng TV CMS aka LFCMS 3.8.6 allows full path disclosure via the /install.php?s=/1 URI...
Battelle V2I Hub SQL Injection Vulnerability (CNVD-2019-03267)
The Battelle V2I Hub is a connected vehicle and roadway information management system from Battelle Memorial Institute, Inc. The system supports effective communication between infrastructure information and vehicle information. A SQL injection vulnerability exists in Battelle V2I Hub version 3.0...
The vulnerability of the OSPFv3 protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.
The vulnerability of the OSPFv3 protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to errors in the packet processing mechanisms. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially crafted OSPFv3 Link-State...
radare2 'r_bin_dyldcache_extract' function heap buffer overflow vulnerability
radare2 is a set of libraries and tools for working with binary files. A heap buffer overflow vulnerability exists in the 'rbindyldcacheextract' function in the libr/bin/format/mach0/dyldcache.c file in radare2 versions prior to 3.1.1. An attacker can exploit this vulnerability to cause a denial ...
PT-2018-15402 · S Cms · S-Cms
Name of the Vulnerable Software and Affected Versions: S-CMS version 3.0 Description: An issue in S-CMS allows SQL Injection via the P no field in the "bank/callback1.php" API endpoint. Recommendations: For S-CMS version 3.0, update to a version that includes a fix for this issue, or as a tempora...
S-CMS SQL Injection Vulnerability (CNVD-2018-26676)
S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the bank/callback1.php file in S-CMS version 3.0, which stems from the program's failure to filter the 'Pno' field, and can be exploited by remote attackers to execute SQL statements with the...
The vulnerability of the implementation of SMBv2 and SMBv3 protocols in Cisco Firepower System software allows a perpetrator to induce a service failure.
The vulnerability of the SMBv2 and SMBv3 protocols implemented by Cisco Firepower System arises from incorrect validation of the SMB message header. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
CVE-2018-17949
Cross site scripting vulnerability in iManager prior to 3.1 SP2...
LibSass Denial of Service Vulnerability (CNVD-2018-24636)
LibSass is an open source written in C using Sass CSS extension language parser . A denial of service vulnerability exists in the inspect.cpp file in LibSass version 3.5.5, which can be exploited by an attacker to cause a denial of service with the help of a specially crafted sass input file...
Tarantella Enterprise Path Traversal Vulnerability
Tarantella Enterprise is a centralized data and application management tool that provides a Web management interface and runs on most Unix and Linux platforms. A path traversal vulnerability exists in Tarantella Enterprise versions prior to 3.11. An attacker can exploit this vulnerability to acce...
TerraMaster TOS System Command Injection Vulnerability (CNVD-2019-00661)
TerraMaster TOS is a set of storage server special operating system based on Linux platform developed by Terra Master. The system supports file sharing, cloud data synchronization, data backup and virtualization. The ajaxdata.php file in TerraMaster TOS version 3.1.03 is vulnerable to a command...
NVIDIA GeForce Experience elevation of privilege vulnerability (CNVD-2018-26667)
NVIDIA GeForce Experience for Windows is a set of automatic update tools for Windows-based graphics cards from NVIDIA. A security vulnerability exists in NVIDIA GeForce Experience for Windows prior to version 3.16. An attacker could exploit this vulnerability to gain elevated privileges...
IBM Cloud Private Information Disclosure Vulnerability (CNVD-2018-26025)
IBM Cloud Private is a set of enterprise private cloud solutions from IBM USA. The product is built primarily on Kubernetes and container technology. A security vulnerability exists in IBM Cloud Private version 3.1.0, which stems from the program's failure to use a secure channel e.g., SSL to...
CVE-2018-19312
Centreon 3.4.x fixed in Centreon 18.10.0 and Centreon web 2.8.24 allows SQL Injection via the searchVM parameter to the main.php?p=20408 URI...
CVE-2018-18763
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=SQL SQL Injection...
TELEPORT Cross-Site Scripting Vulnerability
tp4a TELEPORT is a bastion system. The system supports hopping and management of RDP and SSH protocols. A cross-site scripting vulnerability exists in tp4a TELEPORT version 3.1.0, which stems from the program failing to properly handle specially crafted usernames. A remote attacker can exploit th...
ZyXEL ZyWALL USG Cross-Site Request Forgery Vulnerability
ZyXEL ZyWALL USG is a network security firewall appliance from Hopkins ZyXEL Technology. A cross-site request forgery vulnerability exists in ZyXEL ZyWALL USG version 2.12 AQQ.2 and 3.30 AQQ.7. A remote attacker can exploit this vulnerability by adding user accounts with the help of the 'cmd'...