Collaborate Disseminate
Sage XRT Treasury,version 3,fails to properly restrict database access to authorized users,which may enable any authenticated user to gain full access to privileged database functions. Continue reading VU#742632: Sage XRT Treasury database fails to properly restrict access to authorized users
Sage XRT Treasury,version 3,fails to properly restrict database access to authorized users,which may enable any authenticated user to gain full access to privileged database functions. Continue reading VU#742632: Sage XRT Treasury database fails to properly restrict access to authorized users
Several models of Hughes high-performance broadband satellite modems are potentially vulnerable to several issues if not appropriately configured. Continue reading VU#614751: Hughes satellite modems contain multiple vulnerabilities
The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to cross-site scripting and information exposure. Continue reading VU#745607: Accellion FTP server contains information exposure and cross-site scripting vulnerabilities
Microsoft Windows contains a memory corruption bug in the handling of SMB traffic,which may allow a remote,unauthenticated attacker to cause a denial of service on a vulnerable system. Continue reading VU#867968: Microsoft Windows SMB Tree Connect Response denial of service vulnerability
SHDesigns’ Resident Download Manager(as well as the Ethernet Download Manager)does not authenticate firmware downloads before executing code and deploying them to devices. Continue reading VU#167623: SHDesigns Resident Download Manager does not authenticate firmware downloads
The Cisco WebEx extensions for Chrome,Firefox,and Internet Explorer allow a remote,unauthenticated attacker to execute arbitrary code on a vulnerable Windows system. Continue reading VU#909240: Cisco WebEx web browser extension allows arbitrary code execution
CodeLathe FileCloud,version 13.0.0.32841 and earlier,is vulnerable to cross-site request forgery(CSRF). Continue reading VU#865216: CodeLathe FileCloud is vulnerable to cross-site request forgery
On the iOS platform,the ThreatMetrix SDK versions prior to 3.2 fail to validate SSL certificates provided by HTTPS connections,which may allow an attacker to perform a man-in-the-middle(MITM)attack. Continue reading VU#767208: ThreatMetrix SDK for iOS fails to validate SSL certificates
ShoreTel Mobility Client for iOS and Android,version 9.1.3.109 and earlier,fails to properly validate SSL certificates provided by HTTPS connections,which may enable an attacker to conduct man-in-the-middle(MITM)attacks. Continue reading VU#475907: ShoreTel Mobility Client mobile application does not verify SSL certificates