IBM Engineering Workflow Management 安全漏洞

IBM Engineering Workflow Management is an engineering lifecycle management solution software for project management from IBM, U.S.A. A security vulnerability exists in IBM Rational Team Concert that allows an authenticated user to access sensitive information. No detailed vulnerability details ar...

The vulnerability of operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS, related to the disclosure of information, allows attackers to gain access to confidential data.

The vulnerabilities of iOS, iPadOS, tvOS, watchOS, and macOS are related to the exposure of information. Exploiting these vulnerabilities can allow attackers to gain access to confidential information...

Microweber 信息泄露漏洞

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. microweber has an information disclosure vulnerability, which stems from errors in the...

The vulnerability of the k8s module of the Ansible configuration management system, related to the disclosure of information, allows attackers to gain access to confidential data.

The vulnerability of the k8s module in the Ansible configuration management system is related to the exposure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

EVGA Precision XOC 安全漏洞

EVGA Precision XOC is EVGA's This software allows you to fine-tune your NVIDIA graphics card to maximize cooling and performance. A security vulnerability exists in EVGA Precision XOC, which can be exploited by attackers to access sensitive components and data...

The vulnerability of the libjpeg-turbo codec, related to reading beyond the buffer boundary, allows attackers to access confidential information or cause service failures.

The vulnerability of the libjpeg-turbo codec is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential information or cause service failures by creating a specially crafted file...

The vulnerability of the Android EMUI operating system’s shell, related to the bypassing of security features, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Android EMUI operating system’s shell is related to the bypassing of security features. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2021-23193

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3 ; 8.40...

vivo Jovi Smart Scene 安全漏洞

Vivo Jovi Smart Scene is used by China's Vivo to provide users with efficient, interactive and decision-making personalized services. The vivo Jovi Smart Scene suffers from a security vulnerability that allows an attacker to access sensitive information stored in the jovi Smart Scene module by...

Microsoft Edge 信息泄露漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge suffers from an information disclosure vulnerability that allows remote attackers to access potentially sensitive information...

The vulnerability of the highly efficient pglogical logical replication system, related to the failure to cleanse input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the highly efficient pglogical logical replication system is related to the failure to perform data cleansing on input data. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

SAP ERP 安全漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. SAP ERP has a security vulnerability that allows an attacker to register calls to certain functions that would otherwise be restricted to specific users. These functions are usually exposed over the network, and once...

VulnCheck KEV: CVE-2021-20090

Arcadyan Buffalo firmware contains a path traversal vulnerability that could allow unauthenticated, remote attackers to bypass authentication and access sensitive information. This vulnerability affects multiple routers across several different vendors...

EVlink City, EVlink Parking, EVlink Smart Wallbox code issue vulnerability

Schneider Electric EVlink City and others are a charging solution for electric vehicle charging stations from Schneider Electric France. EVlink City, EVlink Parking, and EVlink Smart Wallbox are vulnerable to a code issue that The vulnerability stems from the fact that when carefully crafted...

Icinga 安全漏洞

Icinga is a scalable server, network resource monitoring system from Icinga, Germany. A security vulnerability exists in Icinga that originates from the fact that an attacker who obtains credentials can impersonate Icinga to access these services and add, modify, and delete information there. The...

Vulnerabilities fixed in Synology DiskStation Manager

Vulnerabilities have been fixed in Synology DiskStation Manager. An authenticated malicious person can exploit the vulnerabilities to obtain sensitive information and system data, as well as to execute arbitrary code under the privileges of the user. Synology has released updates to fix the...

Oracle ZFS Storage Appliance 安全漏洞

Oracle ZFS Storage Appliance is a storage appliance from Oracle Corporation of America that supports flash memory, petabytes of file storage and has a built-in Oracle database. A security vulnerability exists in Oracle ZFS Storage Appliance Kit Core 8.8 that could allow a low-privileged attacker ...

Oracle ZFS Storage Appliance 安全漏洞

Oracle ZFS Storage Appliance is a storage appliance from Oracle Corporation of America that supports flash memory, petabytes of file storage and has a built-in Oracle database. A security vulnerability in Oracle ZFS Storage Appliance Kit Installation 8.8 allows an advanced privileged attacker to...

The vulnerability of GE Healthcare’s medical diagnostic equipment lies in the lack of protection for operational data. This allows unauthorized individuals to gain access to protected information or enhance their privileges.

The vulnerability of GE Healthcare’s medical diagnostic equipment is related to the lack of protection for operational data. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information or enhance their privileges...

The vulnerability of the Python Requests HTTP request library relates to the lack of a mechanism for storing registration data, allowing attackers to access confidential information.

The vulnerability of the Python Requests HTTP request library is related to the lack of a mechanism for storing registration data. Exploiting this vulnerability can allow an attacker to gain access to confidential data...