Information Disclosure

puppet is vulnerable to information disclosure. The vulnerability exists due to leak sensitive information via metrics API which allows an attacker to access on localhost by default...

Command Execution Vulnerability in Swift Apple Screen Recorder Wizard

Swift Apple Screen Recording Wizard is a cell phone cast screen recording software. A command execution vulnerability exists in Swift Apple Screen Recorder, which can be exploited by an attacker to gain control of the server...

The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to gain access and modify data.

The vulnerability of the Media Foundation component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain access to and modify data...

CloudBees Jenkins ElasTest Plugin Cross-Site Request Forgery Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site request forgery...

CVE-2020-15931

Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator that is configured within the product in its installation state by generating a single Kerberos Pre-Authentication Failed ID 4771 event on a...

CVE-2020-15910

SolarWinds N-Central version 12.3 GA and lower does not set the JSESSIONID attribute to HTTPOnly. This makes it possible to influence the cookie with javascript. An attacker could send the user to a prepared webpage or by influencing JavaScript to the extract the JESSIONID. This could then be...

Microsoft SharePoint Information Disclosure Vulnerability (CNVD-2020-57588)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A security...

Information Disclosure Vulnerability in Multiple Huawei Products (CNVD-2020-68354)

The Huawei P30 Pro, among others, is a smartphone from the Chinese company Huawei Huawei. A number of Huawei products suffer from an information disclosure vulnerability that stems from the failure to adequately verify the identity of a smart wearable device in a particular scenario, where an...

Apache Solr Remote Code Execution Vulnerability

Apache Solr is an independent enterprise-class search application server , it provides similar to the external Web-service API interface . Users can request via http, to the search engine server to submit a certain format of the XML file , to generate the index ; can also be operated through the...

Moderate: Red Hat Security Advisory: glib2 and ibus security and bug fix update

An update for glib2 and ibus is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2020-54999)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a resource management error vulnerability. The vulnerability arises from improper management of system resources e.g., memory, disk space, files, etc. by a network system o...

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the win32k component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

Cross site scripting

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user for the duration of the browser session after previously explicitly authenticating with the API...

CVE-2020-15773

An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user for the duration of the browser session after previously explicitly authenticating with the API...

mysql: Server: Options unspecified vulnerability (CPU Jan 2020)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Options. Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

Microsoft SharePoint Authorization Issues Vulnerability

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An authorization issu...

Google Android Framework Information Disclosure Vulnerability (CNVD-2020-54066)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Framework component of Google Android 8.0, 8.1, 9, and 10. An attacker can exploit the vulnerability to obtain...

PT-2020-3914 · Microsoft · Windows State Repository Service +1

Name of the Vulnerable Software and Affected Versions: Windows State Repository Service affected versions not specified Description: An information disclosure issue exists due to the improper handling of objects in memory by the Windows State Repository Service. This could allow an attacker to...

Information Disclosure

kenkins credentials binding plugin is vulnerable to information disclosure. The secrets in the build log are not masked and sanitized when the build does not contain build steps, allowing an attacker with access to the logs to obtain the secrets...

Buffer overflow

NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency dispenser and the host computer, permitting an attacker with physical access to internal ATM components the ability to inject a malicious payload and...