Red Hat Enterprise Linux glibc Denial of Service Vulnerability

Red Hat Enterprise Linux RHEL is a set of Linux operating systems maintained and distributed by Red Hat for business users. A security vulnerability exists in the 'calloc' function in the glibc package for Red Hat Enterprise Linux RHEL versions 6.7 and 7.2, which arises from a program that fails ...

SAP NetWeaver AS JAVA Java Startup Framework Component Denial of Service Vulnerability

SAP NetWeaver is a service-oriented, integrated application platform from SAP that provides a development and runtime environment for SAP applications. SAP NetWeaver AS Application Server Java is an application server that runs in NetWeaver and is based on the Java programming language. Java...

SAP NetWeaver Java AS RTC Service Information Disclosure Vulnerability

SAP NetWeaver is SAP's integrated technology platform and the technology foundation for all SAP applications since SAP Business Suite. A security vulnerability exists in the chat function of the RTC service in SAP NetWeaver Java AS version 7.4, which can be exploited by remote attackers to obtain...

McAfee Email Gateway Cross-Site Scripting Vulnerability (CNVD-2016-02066)

McAfee Email Gateway is an enterprise-class email security solution. A cross-site scripting vulnerability exists in McAfee Email Gateway MEG version 7.6.x prior to 7.6.404, where File Filtering is enabled and action is set to ESERVICES:REPLACE, which allows a remote attacker to inject arbitrary w...

CVE-2016-0289

shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictions via unspecified vectors...

IBM Maximo Asset Management Security Bypass Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A security...

SAP NetWeaver Manufacturing Integration and Intelligence Catalog Traversal Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications.Manufacturing Integration and Intelligence also known as MII, formerly known as xMII is one of the core...

SAP NetWeaver J2EE Engine UDDI Server SQL Injection Vulnerability

SAP NetWeaver J2EE Engine is the German SAP SAP company's a service-oriented integrated application platform J2EE engine. A SQL injection vulnerability exists in the UDDI server of SAP NetWeaver J2EE Engine version 7.40. A remote attacker could exploit this vulnerability to execute arbitrary SQL...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00197)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

TYPO3 Front-end Component Cross-Site Scripting Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF maintained by the Swiss TYPO3 Association. A cross-site scripting vulnerability exists in the front-end component of TYPO3 versions 6.2.x before 6.2.16 and 7.x before 7.6.1. A remote attacker can exploit this vulnerabilit...

Apple QuickTime Denial of Service Vulnerability (CNVD-2016-00191)

Apple QuickTime is a multimedia playback software developed by Apple. The program is capable of handling a wide range of resources such as digital video, media passages, and more. A security vulnerability exists in Apple QuickTime versions prior to 7.7.9. A remote attacker can exploit this...

IBM Security QRadar SIEM Cross-Site Scripting Vulnerability

IBM Security QRadar SIEM is an IBM USA solution that consolidates log-sourced event data from thousands of devices and applications dispersed throughout the network. The solution stores each event in its raw form and then performs instant correlation of events to differentiate between actual...

PHP 'ext/standard/string.c' Arbitrary Code Execution Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. An...

IBM Security QRadar Incident Forensics Cross-Site Request Forgery Vulnerability

IBM Security QRadar Incident Forensics is a suite of security forensic investigation software from IBM. The software supports in-depth forensic investigations of suspected malicious network security incidents, and repair network security vulnerabilities. A cross-site request forgery vulnerability...

CVE-2015-5015

IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST URL...

Unspecified Vulnerability in Persistent Systems Accelerite Radia Client Automation

Persistent Systems Accelerite Radia Client Automation formerly known as HP Client Automation is a client automation management solution from Persistent Systems India. The solution provides monitoring, alerting, auto-remediation and reporting on hardware, applications and operating systems. A...

HP Matrix Operating Environment Information Disclosure Vulnerability (CNVD-2015-05713)

HP Matrix Operating Environment is a suite of cloud management software designed for infrastructure services from Hewlett-Packard HP. A security vulnerability exists in HP Matrix Operating Environment versions prior to 7.5.0. A remote attacker could exploit the vulnerability to obtain sensitive...

HP Matrix Operating Environment Systems Insight Manager Information Disclosure Vulnerability (CNVD-2015-05708)

HP Matrix Operating Environment is a set of cloud management software designed for infrastructure services from Hewlett-Packard HP in the U.S. HP Systems Insight Manager SIM is a set of management software for HP servers and storage devices. The software provides multi-system management, fault...

SAP NetWeaver Portal XML External Entity Vulnerability

SAP NetWeaver is a service-oriented, integrated application platform from SAP that provides a development and runtime environment for SAP applications.SAP NetWeaver Portal is a portal solution that provides single sign-on information for authentication via a Web browser. An XML external entity...

CVE-2014-8391

The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to obtain sensitive information from other users' sessions via a large number of requests...