261 matches found
Ape Tutoring (Windows client) suffers from a dll hijacking vulnerability
Ape Tutoring is online tutoring software for all subjects in elementary, middle and high school. Ape Tutoring Windows client suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...
CVE-2020-11135
u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, Kamorta, MSM8917, MSM8953, Nicobar, QCM2150, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SDM429, SDM439,...
Code injection
u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, Kamorta, MSM8917, MSM8953, Nicobar, QCM2150, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SDM429, SDM439,...
Command Execution Vulnerability in Ape Tutoring Client for Windows
Ape Tutoring is online tutoring software for all subjects in elementary, middle and high school. A command execution vulnerability exists in the Windows version of the Ape Tutoring client, which can be exploited by attackers to execute malicious code...
Code execution vulnerability in Ape Programming client
Ape Programming Client is a platform under Ape Tutoring that specializes in online education for youth programming. A code execution vulnerability exists in Ape Programming Client, which can be exploited by attackers to execute malicious code...
WordPress Photo Gallery – Image Gallery by Ape plugin <= 2.0.6 - Authenticated Arbitrary plugin deactivation
Authenticated Arbitrary plugin deactivation found by Jerome Bruandet in WordPress Photo Gallery – Image Gallery by Ape plugin versions = 2.0.6. Solution Update the WordPress Photo Gallery – Image Gallery by Ape plugin to the latest available version at least 2.0.7...
Photo Gallery – Image Gallery by Ape <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation
The Photo Gallery – Image Gallery by Ape WordPress plugin was affected by an Authenticated Arbitrary Plugin Deactivation security vulnerability...
CVE-2019-11898
Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition APE 3.8...
CVE-2019-11899
An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition APE 3.8, client installations need to be authorized by the APE administrator...
Code injection
Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition APE 3.8...
Information disclosure
An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition APE 3.8, client installations need to be authorized by the APE administrator...
CVE-2019-11899
CVE-2019-11899 describes an unauthenticated exposure where an attacker can gain unauthorized access to sensitive data by exploiting the Windows SMB protocol on a Bosch Access Professional Edition (APE) 3.8 client installation. The issue affects how client installations are authorized by the APE a...
CVE-2019-11899
An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition APE 3.8, client installations need to be authorized by the APE administrator...
CVE-2019-11898
The CVE-2019-11898 entry concerns Bosch Access Professional Edition (APE) service tools. Affected component: APE service tools used with Bosch APE; root cause: unauthorized admin privileges achieved by reverse engineering one of the APE service tools. Impact: attacker could gain administrative pr...
CVE-2019-11898
Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition APE 3.8...
ICSA-19-253-03_Siemens Industrial Products (Update P)
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Industrial Products Vulnerabilities: Excessive Data Query Operations in a Large Data Table, Integer Overflow or Wraparound, Uncontrolled Resource Consumption 2. UPDATE INFORMATION...
WordPress wpape APE GALLERY plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wpape APE GALLERY plugin is an image management plugin used in it. A cross-site scripting vulnerability exists in the...
Cross site scripting
The wpape APE GALLERY plugin 1.6.14 for WordPress has stored XSS via the classGallery.php getCategories function...
