HPESBHF03744 rev.1 - HPE Intelligent Management Center (iMC) PLAT running OpenSSL, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP Intelligent Management Center iMC All versions prior to IMC PLAT 7.3 E0504P04 - Please refer to the RESOLUTION below for a list of impacted products. CVSS Scores: | CVE | CV...

Unspecified Vulnerability in Google Android Qualcomm Component (CNVD-2017-08209)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. A security vulnerability exists in the Qualcomm component in versions of Google Android prior to...

HP Intelligent Management Center Remote Code Execution Vulnerability (CNVD-2017-06981)

HP Intelligent Management Center IMC is a suite of network intelligence management center solutions from Hewlett-Packard HP. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A remote code execution vulnerability exists in HP IMC...

UBUNTU-CVE-2017-8349

In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service memory leak via a crafted file...

IBM Curam Social Program Management Information Disclosure Vulnerability

IBM Curam Social Program Management SPM is a suite of social program management solutions from IBM USA. The solution supports the process of end-to-end social program delivery. A security vulnerability exists in IBM Curam SPM versions 5.2, 6.0 and 7.0. An attacker could exploit the vulnerability ...

Qibo CMS whole site system V7.0 exists overstepping access vulnerability

Zibo CMS system is an open source content management system. Qibo CMS whole site system V7.0 suffers from an override access vulnerability. By modifying the UID parameter value, the attacker can traverse the sensitive information of other users, constituting information leakage...

cURL Information Disclosure Vulnerability

cURL is a command line file transfer tool that supports FTP, FTPS, HTTP, HTTPS, GOPHER, TELNET, DICT, FILE and LDAP. An information disclosure vulnerability exists in the ourWriteOut function of toolwriteout.c in cURL 7.53.1, where an attacker can obtain sensitive information by reading the...

WordPress Booking Calendar Plugin Directory Traversal Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A directory traversal vulnerability exists in WordPress plugin Booking Calendar plugin version 7.0 and earlier versions, whic...

IBM Security Identity Manager Cross-Site Request Forgery Vulnerability (CNVD-2017-04428)

IBMSecurityIdentityManager ISIM is a suite of identity management and governance solutions from IBM, USA. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password management. A cross-si...

CVE-2017-6356

Palo Alto Networks Terminal Services aka TS Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which allows attackers to obtain sensitive session information via unknown vectors...

CVE-2016-5857

The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the kernel via a crafted application, aka Android internal bug 34386529 and Qualcomm internal bug CR1094140...

CVE-2016-9730

IBM QRadar Incident Forensics 7.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference : 1999549...

CVE-2016-9723

IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1999534...

HPESBHF03710 rev.1 - HPE Intelligent Management Center (IMC) PLAT, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC 7.2 E0403P06 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-5790 |...

eClinicalWorks Patient Portal Cross-Site Scripting Vulnerability

eClinicalWorks PatientPortal is a product for healthcare applications from eClinicalWorks, Inc. that provides patients with a secure means of communicating to view their Personal Health Record PHR, view lab results, and more. A cross-site scripting vulnerability exists in the raceMasterList.jsp...

SAP NetWeaver XML External Entity Information Disclosure Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver version 7.5. An attacker could exploit this...

SAP NetWeaver AS JAVA 'getUserUddiElements' SQL Injection Vulnerability

SAP NetWeaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An SQL injection vulnerability exists in SAP NetWeaver version 7.40, which arises from insufficient validation o...

Citrix Provisioning Services Information Disclosure Vulnerability

Citrix Provisioning Services enables the creation of a set of images that use streaming technology to transport physical and virtual servers, reducing storage requirements and enabling fast, consistent and reliable application deployment. An information disclosure vulnerability exists in Citrix...

CVE-2016-9680

Citrix Provisioning Services before 7.12 allows attackers to obtain sensitive information from kernel memory via unspecified vectors...

CVE-2017-0388

An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read data from an external storage SD card inserted by the primary user. This issue is rated as High because it is a general bypass for operating system protections that isolate...