CVE-2016-9984

IBM Maximo Asset Management 7.5 and 7.6 could allow a remote authenticated attacker to execute arbitrary commands on the system as administrator. IBM X-Force ID: 120276...

CVE-2017-2187

Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-15246 · WordPress · Wp Live Chat Support

Name of the Vulnerable Software and Affected Versions: WP Live Chat Support versions prior to 7.0.07 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations: For versions prior to 7.0.07, update to version 7.0.07 or later to resolv...

ImageMagick 'coders/pdb.c' Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadPDBImage' function of the coders/pdb.c file in ImageMagick versio...

ImageMagick Denial of Service Vulnerability (CNVD-2017-08551)

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadMPCImage' function of the mpc.c file in ImageMagick version...

Cross-Site Request Forgery Vulnerability in 08CMS Real Estate System

08CMS Real Estate System is a PHP+MYSQL based, professional and secure operation solution for local real estate portals. 08cms version 7.0 real estate system has a cross-site request forgery vulnerability, which can be exploited by attackers to perform unauthorized operations...

IBM Maximo Asset Management Sensitive Information Disclosure Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A sensitive...

Dell Integrated Remote Access Controller Cross-Site Scripting Vulnerability

The Dell Integrated Remote Access Controller iDRAC 7 and 8 are both remote access control cards from Dell USA. A cross-site scripting vulnerability exists in Dell iDRAC 7 and 8 versions prior to 2.21.21.21. A remote attacker could exploit this vulnerability to inject arbitrary web script or HTML...

Unspecified Vulnerability in Google Android Qualcomm Component (CNVD-2017-08209)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A security vulnerability exists in the Qualcomm component in versions of Google Android prior to...

HP Intelligent Management Center Remote Code Execution Vulnerability (CNVD-2017-06981)

HP Intelligent Management Center IMC is a suite of network intelligence management center solutions from Hewlett-Packard HP. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability exists in HP IMC...

UBUNTU-CVE-2017-8349

In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service memory leak via a crafted file...

IBM Curam Social Program Management Information Disclosure Vulnerability

IBM Curam Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. A security vulnerability exists in IBM Curam SPM versions 5.2, 6.0 and 7.0. An attacker could exploit the vulnerability ...

cURL Information Disclosure Vulnerability

cURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. An information disclosure vulnerability exists in the ourWriteOut function of toolwriteout.c in cURL 7.53.1, where an attacker can obtain sensitive information by reading the...

Qibo CMS whole site system V7.0 exists overstepping access vulnerability

Zibo CMS system is an open source content management system. Qibo CMS whole site system V7.0 suffers from an override access vulnerability. By modifying the UID parameter value, the attacker can traverse the sensitive information of other users, constituting information leakage...

WordPress Booking Calendar Plugin Directory Traversal Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A directory traversal vulnerability exists in WordPress plugin Booking Calendar plugin version 7.0 and earlier versions, whic...

IBM Security Identity Manager Cross-Site Request Forgery Vulnerability (CNVD-2017-04428)

IBMSecurityIdentityManager ISIM is a suite of identity management and governance solutions from IBM, USA. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password management. A cross-si...

CVE-2017-6356

Palo Alto Networks Terminal Services aka TS Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which allows attackers to obtain sensitive session information via unknown vectors...

CVE-2016-5857

The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR1094140...

CVE-2016-9723

IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1999534...

CVE-2016-9730

IBM QRadar Incident Forensics 7.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1999549...