The vulnerability of the multi-connection mode of the Microprogrammable Network Interface Device Firepower Threat Defense (FTD) allows a attacker to exit the container for their own instance of FTD and execute arbitrary commands with root privileges.

The vulnerability of the multi-connection mode of the Firepower Threat Defense FTD software relates to security configuration errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges from within the FTD instance...

The vulnerability of the ufw network firewall utility in the Astra Linux operating system, which allows a hacker to trigger a service failure under a configured policy-based integrity control for the file system.

The vulnerability of the ufw network firewall utility in the Astra Linux operating system is related to a configuration error that causes the utility to terminate abnormally when attempting to enable the ufw network firewall. Exploiting this vulnerability could allow an attacker to trigger a...

Google Android Touch Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA, and Touch driver is one of the touch drivers. The Touch driver component in Android has an information disclosure vulnerability that originates from a configuration error in a networked system or...

Google Android Touch Driver Information Disclosure Vulnerability (CNVD-2019-34472)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA, and Touch driver is one of the touch drivers. The Touch driver component in Android has an information disclosure vulnerability that originates from a configuration error in a networked system or...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38576)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38577)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Google Android Information Disclosure Vulnerability (CNVD-2019-38540)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38589)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Open-Xchange OX App Information Disclosure Vulnerability (CNVD-2019-40052)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. mail compose is one of the mail editing components. An information disclosure vulnerability exists in Open-Xchange OX...

CORS-Vulnerable-Lab: with COSR configuration error related to the vulnerability code range-vulnerability warning-the black bar safety net

This repository contains the CORS configuration error related to the vulnerable code. You can be on the local machine to configure the vulnerable code, and to the actual use of the CORS related error configuration issue. In this case, I would first like to thank@albinowax, the AKReddy, And Vivek...

CVE-2018-14670

Incorrect configuration in deb package in ClickHouse before 1.1.54131 could lead to unauthorized use of the database...

cPanel Information Disclosure Vulnerability (CNVD-2019-26212)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions of cPanel prior to 66.0.2. The vulnerability stems from an error in th...

HumHub Social Network Kit Enterprise Information Disclosure Vulnerability

HumHub Social Network Kit Enterprise is an open source social networking kit. version 1.3.13 of HumHub Social Network Kit Enterprise contains an information disclosure vulnerability that stems from a configuration or other error in the operation of the network system or product, which could be...

PrinterOn Central Print Services Information Disclosure Vulnerability

PrinterOn Central Print Services CPS is a print service center management solution from PrinterOn Canada. An information disclosure vulnerability exists in PrinterOn CPS version 4.1.4 and earlier. The vulnerability stems from an error in configuration or other errors in the operation of a network...

Infinova Swann SWWHD-INTCAM-HD Information Disclosure Vulnerability

The Infinova Swann SWWHD-INTCAM-HD is a webcam from Infinova USA. An information disclosure vulnerability exists in Infinova Swann SWWHD-INTCAM-HD. The vulnerability arises from a configuration or other error in the operation of a network system or product. An unauthorized attacker could exploit...

IBM Sterling B2B Integrator Information Disclosure Vulnerability (CNVD-2019-14590)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. An information disclosure vulnerability exists in IBM Sterlin...

The vulnerability of the coTURN server, related to configuration errors, allows attackers to compromise data integrity.

The vulnerability of the coTURN server is related to a configuration error that causes external traffic to be redirected to the backend interface of its own host. Exploiting this vulnerability allows an attacker to compromise the integrity of data...

The vulnerability of the library package responsible for performing security transformations using GOST algorithms in the Astra Linux operating system allows a perpetrator to trigger a service failure. This vulnerability is related to a configuration error in the package.

The vulnerability of the library package responsible for performing security transformations based on GOST algorithms in the Astra Linux operating system is related to a configuration error in the package. This error causes the security transformation to be enabled automatically during package...

The vulnerability of the password generation and quality assessment library in Astra Linux’s operating system, libpam-pwquality, is related to a configuration error that allows an attacker to gain unauthorized access to the system.

The vulnerability of the password generation and quality assessment library in the Astra Linux operating system is related to a configuration error that causes no checks are performed to ensure that domain user passwords comply with the specified security policies. Exploiting this vulnerability...

The vulnerability of the SoMachine Basic software, related to configuration errors, allows a perpetrator to execute SoMachine.

The vulnerability of the SoMachine Basic software is related to configuration errors. Exploiting this vulnerability allows a remote attacker to execute SoMachine by sending specially crafted Ethernet messages...