4947 matches found
Ivanti Avalanche Information Disclosure Vulnerability (CNVD-2018-12538)
Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions 5.3 through 6.2, which stems from the program's use of...
Apache Geode server remote code execution vulnerability
Apache Geode server is the Apache Software Foundation's platform for providing real-time and consistent access to data for data-intensive applications in distributed cloud architectures. A security vulnerability exists in Apache Geode server versions 1.0.0 through 1.4.0. A remote attacker with th...
3rr (>=0.0.1 <=0.0.2), @apechimp/cool-led (=1.0.0) +321 more potentially affected by CVE-2015-9242 via ecstatic (>=0.1.6 <=1.3.1)
ecstatic NPM version =0.1.6, =0.0.1, =0.2.3, =0.2.1, =0.1.1, =1.0.0, =1.6.9, =0.0.6, =3.0.0-0, =0.0.0, =0.0.1, =0.0.4 and more Source cves: CVE-2015-9242 Source advisory: OSV:GHSA-VWJC-Q9PX-R9VQ...
The Sleuth Kit Buffer Overflow Vulnerability (CNVD-2018-14708)
The Sleuth Kit TSK is a collection of data forensic tools developed by software developer Brian Carrier. The tools are able to analyze file systems such as FAT, NTFS, UFS, etc. and provide detailed information about the file system, including deleted data. A buffer overflow vulnerability exists i...
DEBIAN-CVE-2018-11739
An issue was discovered in libtskimg.a in The Sleuth Kit TSK from release 4.0.2 through to 4.6.1. An out-of-bounds read of a memory region was found in the function rawread in tsk/img/raw.c which could be leveraged by an attacker to disclose information or manipulated to read from unmapped memory...
IBM API Connect Information Disclosure Vulnerability (CNVD-2018-10950)
IBM API Connect aka APIConnect is an integrated solution for managing the API lifecycle from IBM USA. The solution supports creating, running, managing and securing APIs, microservices and more. A security vulnerability exists in IBM API Connect versions 5.0.0.0 through 5.0.8.2, which stems from...
CVE-2018-1532
IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against the system. IBM X-Force ID: 142430...
curl buffer overflow vulnerability (CNVD-2018-10338)
Haxx curl is a set of file transfer tools from the Swedish company Haxx that work on the command line using URL syntax, the tool supports file uploads and downloads, and includes a libcurl client-side URL transfer library for program development. A heap buffer overflow vulnerability exists in Hax...
Cybozu Office Operation Restriction Bypass Vulnerability
Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. An operation restriction bypass vulnerability exists in Cybozu Office versions 10.0.0 through 10.8.0. An attacker can exploit the vulnerability to bypass access restrictions and write to or access data that is not ye...
PHPRAP Server-Side Request Forgery Vulnerability
PHPRAP is a PHP lightweight open source API interface document management system . A server-side request forgery vulnerability exists in the application/home/controller/debug.php file in PHPRAP versions 1.0.4 through 1.0.8. This vulnerability can be exploited to perform server-side request forger...
Apache Ambari Path Traversal Vulnerability
Apache Ambari is a set of tools for configuring, managing and monitoring Apache Hadoop clusters from the Apache Apache Software Foundation, USA. The tool supports visualization and analysis of job and task execution, support for system alerts, and more. A directory traversal vulnerability exists ...
Apache Derby External Control Input Vulnerability
Apache Derby is the United States Apache Apache Software Foundation developed a set of open source database management system. A security vulnerability exists in Apache Derby versions 10.3.1.4 through 10.14.1.0, which is caused by the program failing to properly validate incoming network packets....
Flexense DiskBoss Enterprise Cross-Site Scripting Vulnerability
Flexense DiskBoss Enterprise is a rules-based automated data analysis and file management solution from Flexense Canada. The solution supports performing disk space analysis, file classification, file search, file synchronization and data migration. A cross-site scripting vulnerability exists in...
Flexense VX Search Enterprise Cross-Site Scripting Vulnerability
Flexense VX Search Enterprise is an automated rules-based document search solution from Flexense Canada. A cross-site scripting vulnerability exists in Flexense VX Search Enterprise versions 10.1.12 through 10.7. A remote attacker could exploit the vulnerability to execute code that could obtain...
CVE-2017-6910
The HTTP and WebSocket engine components in the server in Kaazing Gateway before 4.5.3 hotfix-1, Gateway - JMS Edition before 4.0.5 hotfix-15, 4.0.6 before hotfix-4, 4.0.7, 4.0.9 before hotfix-19, 4.4.x before 4.4.2 hotfix-1, 4.5.x before 4.5.3 hotfix-1, and Gateway Community and Enterprise...
Cybozu Garoon Browsing Restriction Bypass Vulnerability
Cybozu Garoon is an office software with Chinese, Japanese, and English languages. A browsing restriction bypass vulnerability exists in the application "Space" in Cybozu Garoon 4.0.0 through 4.6.0. The vulnerability can be exploited by users who can log in to the product to view the closed...
GitLab Cross-Site Scripting Vulnerability (CNVD-2018-08691)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A cross-site scripting vulnerability exists in GitLab CE and EE 8.4 - 10.4. The vulnerability is...
DEBIAN-CVE-2018-9267
In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, epan/dissectors/packet-lapd.c has a memory leak...