A10 AX1030 Information Disclosure Vulnerability

The A10 AX1030 is an application delivery product from A10 Networks that provides comprehensive application capabilities for server load balancing, IPv6 migration and virtualization projects. A security vulnerability exists in A10 AX1030 prior to version 2.7.2-P8. A remote attacker could exploit...

Yaxim and Bruno User Simulation Vulnerabilities

yaxim and Bruno are both products of Georg Lukas. yaxim Yet Another XMPP Instant Messenger is an XMPP client with a clean user interface and open source GPLv2. Bruno is the best Jabber / XMPP Instant Messaging IM application. Bruno is the best Jabber / XMPP Instant Messaging IM application. A use...

TalariaX SendQuick Entera and Avera Device Authentication Bypass Vulnerability

TalariaX SendQuick Entera and Avera are both products of TalariaX Singapore. The former is a web-based server management system and the latter is a plug-and-play network monitoring system. A security vulnerability exists in versions of TalariaX SendQuick Entera and Avera devices prior to 2HF16. A...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2017-01280)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...

PT-2017-7731 · Talariax · Sendquick Entera +1

Name of the Vulnerable Software and Affected Versions: SendQuick Entera versions prior to 2HF16 Avera versions prior to 2HF16 Description: An issue was discovered that allows attackers to execute arbitrary system commands due to multiple Command Injection vulnerabilities. Recommendations: For...

CVE-2016-6103

IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts...

CVE-2017-3797

A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to view the fully qualified domain name of the Cisco WebEx administration server. More Information: CSCvb60655. Known Affected Releases: 2.7...

Mis-configuration of Apache Velocity template engine used to send emails in GigaCC OFFICE

Overview GigaCC OFFICE provided by WAM!NET Japan K.K. contains mis-configuration of Apache Velocity template engine which is used to send emails. WAM!NET Japan K.K. and the following people reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and...

BoZoN Remote Code Execution Vulnerability

Bozon is a free and simple open source file sharing application. A remote code execution vulnerability exists in Bozon version 2.4. An attacker could exploit this vulnerability to execute arbitrary code...

UBUNTU-CVE-2016-6581

A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack. This attack occurs when an attacker inserts a header field that is exactly the size of the HPACK...

PT-2017-8994

Name of the Vulnerable Software and Affected Versions Python HPACK library versions 1.0.0 through 2.2.0 Description A denial of service attack, known as an "HPACK Bomb" attack, can be launched against the HTTP/2 implementation built using the Python HPACK library. This occurs when an attacker...

Western Digital MyCloud NAS Remote Command Injection Vulnerability

Western Digital MyCloud NAS is a personal cloud storage device. Western Digital MyCloud NAS version 2.11.142 suffers from a remote command injection vulnerability in /web/googleanalytics.php, which allows an attacker to execute arbitrary commands with root privileges via the arg parameter within...

Nidesoft MP3 Converter Local Buffer Overflow Vulnerability

Nidesoft MP3 Converter is a professional tool for MP3 conversion, which can convert video files, MP3 music and many other audio formats. A local buffer overflow vulnerability exists in Nidesoft MP3 Converter version 2.6.18, which can be exploited by an attacker to execute arbitrary code in the...

CVE-2016-9203

A vulnerability in the Internet Key Exchange Version 2 IKEv2 feature of Cisco ASR 5000 Series Software could allow an unauthenticated, remote attacker to cause a reload of the ipsecmgr process. More Information: CSCvb38398. Known Affected Releases: 20.2.3 20.2.3.65026. Known Fixed Releases:...

Override Access Vulnerability in Journalx 2.0, a Remote Processing System for Journal Manuscripts

Journalx 2.0 is an independently developed platform for remote processing of journal manuscripts developed by Beijing Magtech. Journalx 2.0 is vulnerable to an override access vulnerability. The vulnerability can be exploited by an attacker to gain access to other users' usernames, passwords, and...

Symantec NetBackup Security Bypass Vulnerability

Symantec NetBackup is the United States Symantec Symantec company a set of data backup and recovery software suite designed for business users. A security vulnerability exists in the NetApp plug-in in versions prior to Symantec NetBackup 2.0.1 due to the program's use of non-unique server...

Burden TMA Cross-Site Scripting Vulnerability

Burden TMA is a full-featured PHP-based task management application that supports adding, editing, and deleting tasks, and distinguishes task importance levels by color. A cross-site scripting vulnerability exists in Burden TMA version 2.1.1, which stems from the program failing to adequately...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2016-11771)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A security vulnerability exis...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2016-11262)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. An SQL injection vulnerabilit...

OIC Exponent CMS SQL Injection Vulnerability (CNVD-2016-11171)

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A SQL injection vulnerability...