Design Vulnerability in ZZCMS 8.1 Frontend

ZZCMS is an enterprise website builder. A design vulnerability exists in the ZZCMS 8.1 frontend. An attacker is allowed to exploit the vulnerability to elevate privileges...

CVE-2017-6813

A service provided by Zimbra Collaboration Suite ZCS before 8.7.6 fails to require needed privileges before performing a few requested operations...

CVE-2017-1159

IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a...

Dell Integrated Remote Access Controller Cross-Site Scripting Vulnerability

The Dell Integrated Remote Access Controller iDRAC 7 and 8 are both remote access control cards from Dell USA. A cross-site scripting vulnerability exists in Dell iDRAC 7 and 8 versions prior to 2.21.21.21. A remote attacker could exploit this vulnerability to inject arbitrary web script or HTML...

Unspecified Vulnerability in Symantec Veritas NetBackup and NetBackup Appliance (CNVD-2017-07088)

Symantec Veritas NetBackup NBU and NetBackup NBU Appliance are both products of Symantec USA. The former is a set of enterprise-class backup management software that can run on multiple operating systems, and the latter is an enterprise-class backup management appliance. A security vulnerability...

Cisco Aironet 1800, 2800, and 3800 Series Access Points Plug-and-Play Subsystem Arbitrary Code Execution Vulnerability

The Cisco Aironet 1800, 2800, and 3800 Series Access Points are router access devices from Cisco, U.S.A. Plug-and-Play PnP is one of the subsystems of Plug-and-Play services. An arbitrary code execution vulnerability exists in the PnP subsystem in Cisco Aironet 1800, 2800, and 3800 Series Access...

ZZCMS V8.0 SQL Injection Vulnerability in admin/adclass.php File

ZZCMS is an enterprise website building program A SQL injection vulnerability exists in the modifybigclass function of the ZZCMS V8.0 admin/adclass.php file. The vulnerability is caused by the failure to effectively filter parameters, resulting in an injection vulnerability that allows an attacke...

McAfee VirusScan Enterprise Denial of Service Vulnerability

McAfee VirusScan Enterprise is a suite of antivirus software from the American company McAfee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A security vulnerability exists in Scriptscan COM Object in McAfee...

CVE-2017-1170

IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session. IBM X-Force ID: 123230...

CVE-2017-3547

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: MultiChannel Framework. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromis...

CVE-2017-3536

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Security. Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2017-6356

Palo Alto Networks Terminal Services aka TS Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which allows attackers to obtain sensitive session information via unknown vectors...

IBM WebSphere MQ Denial of Service Vulnerability (CNVD-2017-02626)

IBM WebSphere MQ is a messaging middleware product from IBM, USA. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A denial of service vulnerability exists in IBM WebSphere MQ version 8. An attacker could exploit this vulnerability t...

CVE-2017-6402

An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Denial of service affecting NetBackup server can occur...

CVE-2017-5159

An issue was discovered on Phoenix Contact mGuard devices that have been updated to Version 8.4.0. When updating an mGuard device to Version 8.4.0 via the update-upload facility, the update will succeed, but it will reset the password of the admin user to its default value...

CVE-2016-5803

An issue was discovered in CA Unified Infrastructure Management Version 8.47 and earlier. The Unified Infrastructure Management software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can...

CVE-2017-3268

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.2 and 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Advantech WebAccess 'updateTemplate.aspx' SQL Injection Vulnerability

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A SQL injection vulnerability exists in Advantech WebAcces...

Multiple Vulnerabilities in Dell SonicWALL Secure Mobile Access

Dell SonicWALL Secure Mobile Access is the SonicWALL Secure Remote Access family of devices in the Dell SonicWALL Secure Mobile Access solution from Dell, Inc. Multiple cross-site scripting and cross-site request forgery vulnerabilities exist in Dell SonicWALL Secure Mobile Access SMA version 8.1...

IBM WebSphere Message Broker Information Disclosure Vulnerability (CNVD-2016-11964)

IBM WebSphere Message Broker now known as IBM Integration Bus is an enterprise service bus ESB product from IBM, USA. The product provides connectivity and common data transformations for Service Oriented Architecture SOA environments and non-SOA environments. A security vulnerability exists in...