Alfresco Authorization Issues Vulnerability

Alfresco is an open source enterprise content management system. The platform page using Freemarker development , the main features include document management , collaboration , records management , knowledge base management , Web content management and so on. A vulnerability exists in Alfresco...

Huawei Honor 20 PRO Information Disclosure Vulnerability

Huawei Honor V20 is a smartphone from Chinese company Huawei Huawei. Huawei Honor 20 PRO suffers from an information disclosure vulnerability that stems from errors such as configuration during operation of a network system or product. An attacker can use the vulnerability to obtain sensitive...

Red Hat Quay Information Disclosure Vulnerability

Red Hat Quay is a distributed container image repository from Red Hat, Inc. that is used to build, distribute and deploy containers. An information disclosure vulnerability exists in Red Hat Quay. The vulnerability stems from errors such as configuration during operation of a networked system or...

Cybozu Kintone Mobile Information Disclosure Vulnerability

Cybozu Kintone Mobile is an office application for mobile platforms from Cybozu Japan. The program supports file uploading, editing records, and push notifications. An information disclosure vulnerability exists in Cybozu Kintone Mobile versions 1.0.0 through 2.5 for the Android-based platform. T...

COVIDSafe app information disclosure vulnerability

COVIDSafe app is an Australian coronavirus contact tracing app. An information disclosure vulnerability exists in the COVIDSafe app. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could exploit the vulnerability to obtain...

COVIDSafe app information disclosure vulnerability (CNVD-2020-30664)

COVIDSafe app is an Australian coronavirus contact tracing app. An information disclosure vulnerability exists in the COVIDSafe app. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could exploit the vulnerability to obtain...

Vanilla Forums Information Disclosure Vulnerability

Vanilla Forums is a Canadian company Vanilla Forums PHP-based open source forum program . An information disclosure vulnerability exists in Vanilla Forums versions prior to 2.0.17.9. The vulnerability stems from a configuration or other error in the operation of a networked system or product. An...

Apache NiFi Information Disclosure Vulnerability (CNVD-2020-04924)

Apache NiFi is a data-flow based data processing and distribution system of the Apache Apache Software Foundation, USA. The system supports the configuration and transformation of data routing indicator maps and system intermediary logic. An information disclosure vulnerability exists in Apache...

Apache Superset Information Disclosure Vulnerability

Apache Superset is an enterprise-class business intelligence Web application from the Apache Apache Software Foundation in the United States. The program includes features such as mutual data visualization and enterprise-level authentication. An information disclosure vulnerability exists in Apac...

Red Hat JBoss Enterprise Application Platform Information Disclosure Vulnerability (CNVD-2020-03553)

Red Hat JBoss Enterprise Application Platform EAP is the United States Red Hat Red Hat company's set of open source , J2EE-based middleware platform. The platform is mainly used to build, deploy and host Java applications and services. An information disclosure vulnerability exists in Red Hat JBo...

The vulnerability of the One Drive for Android app, related to security configuration errors, allows attackers to escalate their privileges.

The vulnerability of the One Drive for Android app is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the web interface of the microprogramming software for the Technicolor TC7230 allows a attacker to perform a DNS Rebinding attack.

The vulnerability of the web interface of the microprogramming software for the Technicolor TC7230 router is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to carry out a DNS Rebinding attack remotely...

Pivotal Ops Manager Information Disclosure Vulnerability

Pivotal Software Ops Manager is a set of open source Platform-as-a-Service PaaS cloud computing platform from US-based Pivotal Software. The platform can provide container scheduling, continuous delivery and automated service deployment and other functions. An information disclosure vulnerability...

GitLab Information Disclosure Vulnerability (CNVD-2020-12723)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

Gitlab Information Disclosure Vulnerability (CNVD-2020-12718)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in Gitlab...

ELOG Information Disclosure Vulnerability

ELOG is a web application written in C for creating personal and general purpose logs. An information disclosure vulnerability exists in ELOG 3.1.4-57bea22 and prior versions. The vulnerability stems from errors such as configuration during operation of a networked system or product. An...

Contao Information Disclosure Vulnerability

Contao is an open source content management system CMS developed using PHP. The system supports search engine , rights management and CSS framework . An information disclosure vulnerability exists in Contao versions 4.0 to 4.8.5. The vulnerability arises from errors in configuration and other...

The vulnerability of Microsoft Windows Defender operating system allows attackers to trigger false alerts and incorrect Windows Defender service responses.

The vulnerability of Microsoft Windows Defender operating system is related to security configuration errors. Exploiting this vulnerability can allow attackers to trigger false alerts and incorrect responses by Windows Defender services...

The vulnerability of the Blink display module in Google Chrome browsers allows a hacker to manipulate domain names.

The vulnerability of the Blink display module in Google Chrome browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to perform domain spoofing using a specially created HTML page...

The vulnerability of Google Chrome’s DevTools component allows a hacker to replace the user interface.

The vulnerability of Google Chrome’s DevTools component is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created Chrome extension...