Logitech Unifying Device Information Disclosure Vulnerability (CNVD-2019-34836)

Logitech Unifying is a USB type signal receiver from Logitech, Switzerland. An information disclosure vulnerability exists in the Logitech Unifying device. An attacker could exploit the vulnerability to obtain sensitive information about an affected component...

The vulnerability of the Web interface of the Cisco Application Policy Infrastructure Controller allows a perpetrator to execute arbitrary code within the context of the vulnerable interface or gain access to confidential information.

The vulnerability of the Cisco Application Policy Infrastructure Controller web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the vulnerable interface or gain...

The vulnerability in the web interface of the Cisco Identity Services Engine allows a perpetrator to inject arbitrary JavaScript code into the loaded page and gain access to protected data.

The vulnerability of the Cisco Identity Services Engine web interface relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript code into the loaded page and gain access to protected data by redirecting users to a...

SAP Business One Mobile App for Android Information Disclosure Vulnerability

SAP Business One Mobile App for Android is an Android-based enterprise resource planning application from SAP, Germany. The program includes business management, customer management and sales management. An information disclosure vulnerability exists in version 1.2.12 of the SAP Business One Mobi...

Joomla JCalPro Calendar 4.3.26 SQL Injection

Exploit Title : Joomla JCalPro Calendar Components 4.3.26 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/01/2019 Vendor Homepage : joomlashack.com anything-digital.com Software Download Link : joomlashack.com/joomla-extensions/jcal/ Software...

UBUNTU-CVE-2019-2501

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are prior to 5.2.24 and prior to 6.0.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

IBM API Connect Authentication Bypass Vulnerability

IBM API Connect aka APIConnect is an integrated solution for managing the API lifecycle from IBM USA. The solution supports creating, running, managing, and securing APIs, microservices, and more. An authentication bypass vulnerability exists in LoopBack in IBM API Connect versions 2018.1 through...

Weak Password Vulnerability in Chengdu Zhihui Campus Security Payment Platform

Campus Secure Payment Platform is an internet and mobile internet financial application platform for domestic universities. A weak password vulnerability exists in the Campus Pay platform. An attacker can exploit the vulnerability to obtain sensitive information and also perform unauthorized...

CVE-2018-1518

IBM InfoSphere Information Server 11.7 is affected by a weak password encryption vulnerability that could allow a local user to obtain highly sensitive information. IBM X-Force ID: 141682...

Oracle Java SE Security Updates-03 (cpuoct2018) - Linux

Oracle Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco SD-WAN Solution Certificate Validation Vulnerability

Cisco vEdge 100 Series Routers and so on are the products of the United States Cisco Cisco company. cisco vEdge 100 Series Routers is a 100 series router products. vManage Network Management System is a set of network management system. SD- WAN Solution is a set of network expansion solutions...

SQL Injection Vulnerability in seacms

seacms is a video-on-demand content management system designed for different needs. A SQL injection vulnerability exists in seacms. An attacker can exploit the vulnerability to obtain sensitive database information...

Huawei SafeBox Manager Security Bypass Vulnerability

Huawei SafeBox Manager is a security product from huawei. The Huawei SafeBox Manager security bypass vulnerability allows attackers to exploit a vulnerability to bypass the Secure File Manager privileges to access sensitive device information or files...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-12881)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from an information disclosure vulnerability. The vulnerability stems from Microsoft Edge failing to properly handle objects in memory. An attacker could exploit the vulnerability to obtain information that could further compromis...

SUSE-SU-2018:1582-1 Security update for xen

This update for xen fixes one issue. This security issue was fixed: - CVE-2018-3639: Prevent attackers with local user access from extracting information via a side-channel analysis, aka Speculative Store Bypass SSB, Variant 4 bsc1092631...

Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2018-11747)

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat/Reader has an out-of-bounds read vulnerability. Remote attackers can use th...

OpenJDK: GTK library loading use-after-free (AWT, 8185325)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...

Design Science MathType Remote Code Execution Vulnerability

Design Science MathType is an interactive math editor from Design Science, Inc. that edits math formulas in web pages, presentations, and other documents. A security vulnerability exists in Design Science MathType version 6.9c. The vulnerability can be exploited by an attacker with specially...

CVE-2018-2606

Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications subcomponent: Base. Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Hospitalit...

Oracle Java SE Security Updates (jan2018-3236628) 03 - Linux

Oracle Java SE is prone to multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...