CVE Vulnerability Catalog

SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute arbitrary files via unspecified vectors.

SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Unspecified vulnerability in FFmpeg before version 0.10.3 with unknown impact and attack vectors. This is a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2778, and CVE-2012-2780.

Unspecified vulnerability in FFmpeg before version 0.10.3, with unknown impact and attack vectors. This is a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2778, and CVE-2012-2781.

Unspecified vulnerability in FFmpeg before version 0.10.3 with unknown impact and attack vectors. This is a different vulnerability than CVE-2012-2771, CVE-2012-2773, CVE-2012-2780, and CVE-2012-2781.

Unspecified vulnerability in FFmpeg before version 0.10.3 with unknown impact and attack vectors. This is a different vulnerability than CVE-2012-2771, CVE-2012-2778, CVE-2012-2780, and CVE-2012-2781.

Unspecified vulnerability in FFmpeg before version 0.10.3, with unknown impact and attack vectors. This is a different vulnerability than CVE-2012-2773, CVE-2012-2778, CVE-2012-2780, and CVE-2012-2781.

Versions of salt 2015.5.x before 2015.5.6 and 2015.8.x before 2015.8.1 have a vulnerability that leaks password information in debug logs. This affects win_useradd, salt-cloud, and the Linode driver.

The WS-SP UsernameToken policy in Apache CXF versions 2.4.5 and 2.5.1 allows remote attackers to bypass authentication by sending an empty UsernameToken as part of a SOAP request.

libapache-authenhook-perl version 2.00-04 stores usernames and passwords in plaintext in the vhost error log.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite, affecting the CDE Calendar subcomponent, allows an unauthenticated attacker with network access via TCP to compromise Solaris. Affected versions are 10 and 11.

A deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before version 6.7.3-3432 and 6.3-2967 allows remote attackers to gain administrator privileges via a crafted serialized payload.

A vulnerability in synotheme_upload.php in Synology Photo Station before version 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logo_upload action.

Vulnerability in the OJVM component of Oracle Database Server affecting versions 11.2.0.4, 12.1.0.2, and 12.2.0.1. Easily exploitable by a low privileged attacker with network access and privileges to create sessions and procedures.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server. Affected versions are 10.3.6.0 and 12.1.3.0.

Vulnerability in the Java SE and Java SE Embedded components of Oracle Java SE, affecting version 8u131. Easily exploitable by an unauthenticated attacker with network access, potentially leading to takeover of Java SE and Java SE Embedded.

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) allows an unauthenticated attacker with network access to compromise Java SE. Successful attacks require human interaction and may significantly impact additional products.

Vulnerability in the Java SE and Java SE Embedded component of Oracle Java SE, affecting the RMI subcomponent. It allows easy exploitation by an unauthenticated attacker with network access, potentially leading to takeover of Java SE and Java SE Embedded.

Vulnerability in the Java SE and Java SE Embedded component of Oracle Java SE, concerning RMI, allows an unauthenticated attacker with network access to compromise these systems. The attacker can exploit this vulnerability by supplying data to APIs in the specified component.