CVE-2017-1110

IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged user. IBM X-Force ID: 120915...

CVE-2017-7420

An Authentication Bypass CWE-287 vulnerability in ESMAC aka Enterprise Server Monitor and Control in Micro Focus Enterprise Developer and Enterprise Server 2.3 and earlier, 2.3 Update 1 before Hotfix 8, and 2.3 Update 2 before Hotfix 9 allows remote unauthenticated attackers to view and alter...

WordPress WP Post Popup Plugin <= 2.0.0 - Arbitrary File Viewing Vulnerability

Arbitrary File Viewing Vulnerability could be used to view any file on the site. In the file /public/includes/proxy.php, it passes $GET input to filegetcontents function. Solution Update the plugin...

XnView Classic for Windows Buffer Overflow Vulnerability (CNVD-2017-14496)

XnView Classic for Windows is an image viewing software for Windows developed by French software developer Gougelet Pierre-Emmanuel. The software can be used to view, convert, organize and edit graphic and video files. A buffer overflow vulnerability exists in version 2.40 of XnView Classic for...

The vulnerability of XSLT programs for viewing and editing PDF files in Adobe Reader, Adobe Acrobat Document Cloud, Adobe Acrobat, and Adobe Reader Document Cloud allows attackers to execute arbitrary code.

The vulnerability of XSLT programs for viewing and editing PDF files in Adobe Reader, Adobe Acrobat Document Cloud, Adobe Acrobat, and Adobe Reader Document Cloud arises from operations that go beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrar...

CVE-2017-4989

CVE-2017-4989 affects EMC Avamar Server Software releases listed (7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401). Root cause: unauthenticated remote bypass of authentication to access the system maintenance page, enabling viewing of sensitive info and execution of maintenance tas...

CVE-2017-2813

An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A specially crafted jpeg2000 image can cause an integer overflow leading to wrong memory allocation resulting in arbitrary code execution. Vulnerability can be triggered by viewing the...

Information Disclosure

Moodle is vulnerable to information disclosure. It's possible for remote attackers to view the profiles images of users' accounts...

Information Disclosure

Moodle is vulnerable to information disclosure. The attacks exist because the checking of whose badges are being viewed is not done in the correct context, allowing an authenticated user to discern the other users' badges without their permissions...

Unspecified Vulnerability in Multiple Mimosa Products

Mimosa Client Radios, Mimosa Backhaul Radios, and Mimosa Access Points are all products of Mimosa Networks, Inc.Mimosa Client Radios is a hypervisor for the client devices of the Mimosa Multi-Point solution. Mimosa Backhaul Radios is a hypervisor for broadband backhaul devices.Mimosa Access Point...

Directory traversal

A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software prior to Release 11.1 could allow an authenticated, remote attacker to view any file on an affected system. The vulnerability exists because the affected software does not perform proper input validation of HT...

CVE-2017-8383

Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder...

CVE-2017-8383

Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder...

WikiLeaks Reveals CIA Tool 'Scribbles' For Document Tracking

Update WikiLeaks released details on what it said is a Central Intelligence Agency document tracking program called Scribbles, part of the agency’s effort to keep tabs on documents leaked to whistleblowers and journalists. Scribbles allegedly embeds a web beacon-style tag into watermarks located ...

Summer Baby Zoom Wifi Monitor & Internet Viewing System Elevation of Privilege Vulnerability

Summer Baby Zoom Wifi Monitor and Internet Viewing System is a wireless internet monitoring video system. An elevation of privilege vulnerability exists in the Summer Baby Zoom Wifi Monitor&Internet Viewing System. An attacker can exploit this vulnerability to gain privileges...

Summer Baby Zoom Wifi Monitor & Internet Viewing System Authentication Bypass Vulnerability

Summer Baby Zoom Wifi Monitor and Internet Viewing System is a wireless internet monitoring video system. A security vulnerability exists in the Summer Baby Zoom Wifi Monitor&Internet Viewing System. A remote attacker could exploit this vulnerability to bypass authentication...

CVE-2015-2888

Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to bypass authentication, related to the MySnapCam web service...

CVE-2015-2889

The Summer Baby Zoom Wifi Monitor & Internet Viewing System is affected by CVE-2015-2889, which allows remote attackers to gain privileges through manual entry of a Settings URL. Publicly available details describe an elevation of privilege vulnerability that can be exploited over a network witho...

CVE-2015-2888

The CVE-2015-2888 entry concerns the Summer Baby Zoom Wifi Monitor & Internet Viewing System. Affected component/issue is authentication bypass related to the MySnapCam web service, enabling remote attackers to bypass authentication over the network. CVSS data in the document shows a high/severe ...

CVE-2014-9691

Huawei Tecal vulnerabilities CVE-2014-9691 affect multiple Tecal server models (e.g., RH1288 V2, RH2265 V2, RH2288 V2, RH5885 etc.) and variants listed in the Huawei advisory. The issue is an information disclosure via the web UI Online Users page, allowing logged-in users’ session IDs to be view...