CVE-2018-2732

Vulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2018-2712

Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning component of Oracle Financial Services Applications subcomponent: User Interface. The supported version that is affected is 8.0.x. Easily exploitable vulnerability allows unauthenticated attacker with network...

Oracle Java ME SDK Windows Installer Elevation of Privilege Vulnerability

Oracle Java Micro Edition is a small version of Oracle's Java platform for developing and deploying Java applications.Java ME SDK is one of the development toolkits. A security vulnerability exists in the Installer subcomponent of the Java ME SDK component in Oracle Java Micro Edition, version 8....

Dell SonicWALL Global Management System Cross-Site Scripting Vulnerability

The Dell SonicWall Global Management System GMS is a global management system from Dell, USA. The system enables rapid deployment and centralized management of Dell SonicWALL firewall, anti-spam, backup and recovery, and secure remote access solutions. A cross-site scripting vulnerability exists ...

Advantech WebAccess stack buffer overflow vulnerability (CNVD-2018-00671)

Advantech WebAccess is a set of HMI/SCADA software from Advantech based on browser architecture. The software supports dynamic graphic display and real-time data control, and provides remote control and management of automation equipment. A stack buffer overflow vulnerability exists in versions...

CVE-2017-16753

An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows some inputs that may cause the program to crash...

CVE-2017-16716

A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its inputs for SQL commands...

CVE-2017-1557

IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user with authority to send a specially crafted request that could cause a channel process to cease processing further requests. IBM X-Force ID: 131547...

GPWeb Arbitrary File Upload Vulnerability

GPWeb is a suite of public management software dedicated to the Brazilian government sector. An arbitrary file upload vulnerability exists in GPWeb version 8.4.61. A remote attacker can exploit this vulnerability to upload arbitrary file types including: PHP shells...

Foxit Reader Document Object author Attribute Remote Code Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the author attribute of the Document object in Foxit Reader version 8.3.2.25013, where the program fails to adequately validate the existence of an object before...

TG Soft Vir.IT eXplorer Lite Denial of Service Vulnerability (CNVD-2017-37936)

TG Soft Vir.IT eXplorer Lite is a suite of virus protection software. The program features anti-virus, anti-spyware, malware and virus detection. A denial of service vulnerability exists in the VIRAGTLT.SYS file in TG Soft Vir.IT eXplorer Lite version 8.5.42, which originates when the program fai...

Reflected Cross-Site Scripting Vulnerability in ZZCMS Version 8.1

ZZCMS is an enterprise website builder. A reflective cross-site scripting vulnerability exists in ZZCMS version 8.1. An attacker can construct an XSS statement and perform a pop-up box operation to obtain user cookies and other information...

IBM Tivoli Workload Scheduler Distributed OpenSSL command line utility information disclosure vulnerability

IBM Tivoli Workload Scheduler Distributed is a suite of enterprise task scheduling software from IBM, USA. The software enables automated, scheduled control of workloads.OpenSSL command line utility is one of the command line utilities. An information disclosure vulnerability exists in the OpenSS...

IBM WebSphere MQ Memory Disclosure Vulnerability

IBM WebSphere MQ is a messaging middleware product from IBM, USA. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A memory leak vulnerability exists in IBM WebSphere MQ versions 8.0 and 9.0. An attacker could exploit the vulnerabili...

CVE-2016-10701

In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application...

CVE-2017-1283

IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a shared memory leak by MQ applications using dynamic queues, which can lead to lack of resources for other MQ applications. IBM X-Force ID: 125144...

CVE-2017-0847

An elevation of privilege vulnerability in the Android media framework mediaanalytics. Product: Android. Versions: 8.0. Android ID: A-65540999...

TRITON AP-EMAIL File Access Vulnerability

Websense TRITON AP-EMAIL is a suite of email security solutions from Websense USA. The solution identifies targeted attacks, high-risk users and insider threats, while enabling mobile workers to take countermeasures and ensure their secure use of technologies such as Microsoft Office 365. The...

Google Android Framework elevation of privilege vulnerability (CNVD-2017-35660)

Android is a set of Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA for short.Framework window manager is one of the window management framework. A power lifting vulnerability exists in Framework window manager in Android 8.0. A remote...

CVE-2017-14016

A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.220170817. The application lacks proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, which could allow an attacker to execute arbitrary code under the...