7650 matches found
Advantech Iview SQL注入漏洞
Advantech Iview is a Simple Network Protocol SNMP based management software for B + B SmartWorx devices from Advantech, China. Advantech Iview suffers from an SQL injection vulnerability that arises from the susceptibility of the affected product to SQL injection attacks, which could allow an...
Information disclosure
IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 195516...
Apple macOS SMB server create file request uninitialized memory disclosure
Summary A use of uninitialized data vulnerability exists in the SMB Server Apple macOS 11.2. A specially crafted SMB packet can cause uninitialized data to end up in server reply which can leak sensitive information. This vulnerability can be triggered by sending a malicious packet to the...
The vulnerability of the Shipment Workbench component of the Oracle Landed Cost Management application allows a attacker to disclose protected information or gain access to create, modify, or delete data.
The vulnerability of the Shipment Workbench component of the Oracle Landed Cost Management application relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information or gain access to the ability to create, modify, or delete...
The vulnerability of the Work Provider Site Level Administration component of the application for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks allows a malicious actor to disclose protected information or gain access to the creation, modification, or deletion of data.
The vulnerability of the Work Provider Site Level Administration component of the application for accessing, organizing, and interacting with various types of Oracle Universal Work Queue tasks is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker...
OpenText Brava! 缓冲区错误漏洞
OpenText Brava! Desktop is a Windows-based viewing and collaboration tool that lets you easily view and collaborate on almost any file. An out-of-bounds read vulnerability exists in the parsing of DWF files in OpenText Brava! Desktop. The vulnerability stems from a lack of proper validation of...
PT-2021-19384 · Opentext · Opentext Brava! Desktop
Name of the Vulnerable Software and Affected Versions: OpenText Brava! Desktop version 16.6.3.84 Description: This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a...
The vulnerability of the Resource Exceptions component in the Oracle Work in Process production management system allows a attacker to disclose protected information or gain access to create, modify, or delete data.
The vulnerability of the Resource Exceptions component in the Oracle Work in Process production management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information or gain access to the ability to create,...
AZL-37062 CVE-2020-27748 affecting package xdg-utils 1.2.1-3
A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive fil...
AZL-7424 CVE-2020-27748 affecting package xdg-utils 1.1.3-7
A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive fil...
DEBIAN-CVE-2020-27748
A flaw was found in the xdg-email component of xdg-utils-1.1.0-rc1 and newer. When handling mailto: URIs, xdg-email allows attachments to be discreetly added via the URI when being passed to Thunderbird. An attacker could potentially send a victim a URI that automatically attaches a sensitive fil...
USN-4972-1 postgresql-10, postgresql-12, postgresql-13 vulnerabilities
Tom Lane discovered that PostgreSQL incorrect handled certain array subscripting calculations. An authenticated attacker could possibly use this issue to overwrite server memory and escalate privileges. CVE-2021-32027 Andres Freund discovered that PostgreSQL incorrect handled certain INSERT ... O...
CVE-2020-10698
A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the stdout of the executed jobs which are run from other organizations. Some sensible data can be disclosed. However, critical data should not be disclosed, as it should be protected by the nolog flag when...
CVE-2020-10698
A flaw was found in Ansible Tower when running jobs. This flaw allows an attacker to access the stdout of the executed jobs which are run from other organizations. Some sensible data can be disclosed. However, critical data should not be disclosed, as it should be protected by the nolog flag when...
IBM WebSphere Application Server 代码问题漏洞
IBM WebSphere Application Server WAS is an application server product from IBM in the United States. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. An injection vulnerability exists in IBM WebSphere Application Serv...
The vulnerability of the Health Center component in the Oracle PeopleSoft Enterprise PT PeopleTools business application suite allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Health Center component in the Oracle PeopleSoft Enterprise PT PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...
UBUNTU-CVE-2021-3426
There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server could access the server and use it to disclose sensitive information belonging to the other user that they would not normally be able to...
The vulnerability of Oracle WebLogic Server applications stems from insufficient validation of input data, allowing attackers to disclose sensitive information.
The vulnerability of Oracle WebLogic Server applications exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through HTTP requests...
