CVE-2021-27260

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2021-0443

In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to local information disclosure across user profiles with no additional execution privileges needed. User interaction is needed for...

CVE-2021-21482

SAP NetWeaver Master Data Management, versions - 710, 710.750, allows a malicious unauthorized user with access to the MDM Server subnet to find the password using a brute force method. If successful, the attacker could obtain access to highly sensitive data and MDM administrative privileges...

Authorization

SAP NetWeaver AS JAVA Customer Usage Provisioning Servlet, versions - 7.31, 7.40, 7.50, allows an attacker to read some statistical data like product version, traffic, timestamp etc. because of missing authorization check in the servlet...

GHSA-58C7-PX5V-82HH Potential sensitive information disclosed in error reports

django-registration is a user-registration application for Django. Impact The django-registration package provides tools for implementing user-account registration flows in the Django web framework. In django-registration prior to 3.1.2, the base user-account registration view did not properly...

CVE-2021-21416 Potential sensitive information disclosed in error reports

django-registration is a user registration package for Django. The django-registration package provides tools for implementing user-account registration flows in the Django web framework. In django-registration prior to 3.1.2, the base user-account registration view did not properly apply filters...

CVE-2021-3393

An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. A...

Pegasystem PEGA Platform 访问控制错误漏洞

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. An access control error vulnerability...

CVE-2021-27264

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-27263

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-27262

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

The vulnerability of software for managing IT services and intelligent monitoring in IBM Application Performance Management (APM) stems from the lack of protection for service data. This allows attackers to exploit the exposed information.

The vulnerability of software for managing IT services and intelligent monitoring in IBM Application Performance Management APM is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to disclose the protected information...

The vulnerability of the microprogramming software of the multifunctional Xerox AltaLink device, related to insufficient encryption strength, allows attackers to disclose protected information.

The vulnerability of the microprogramming software of the multifunctional Xerox AltaLink device is related to insufficient encryption strength. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

The vulnerability of Okular’s PDF viewing software lies in the insufficient validation of input data. This allows attackers to access confidential information, compromise its integrity, and cause service failures.

The vulnerability of Okular’s PDF viewing software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

IBM Cloud Pak for Automation 代码问题漏洞

IBM Cloud Pak for Automation is an enterprise container cloud intelligence automation software platform that supports business users in building and running automation applications using containers on Kubernetes. An XML external entity injection vulnerability exists in IBM Cloud Pak for Automatio...

The vulnerability of the IBM Security Verify Bridge software, related to deficiencies in the cryptographic algorithms used, allows a perpetrator to disclose protected information.

The vulnerability of the IBM Security Verify Bridge software is related to deficiencies in the cryptographic algorithms used. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

The vulnerability of the Windows operating system, related to the lack of protection for service data, allows attackers to disclose the protected information.

The vulnerability of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

Vulnerability fixed in Mitel MiContact Center

Mitel has fixed a vulnerability in MiContact Center. The vulnerability allows an authenticated malicious party with access to the Enterprise License Manager portal is able to obtain system data obtain. Mitel has released updates to fix the vulnerability. More information can be found on the page...

The vulnerability of the IBM QRadar SIEM system for event collection and analysis lies in insufficient validation of requests on the server side. This allows attackers to send unauthorized requests and disclose sensitive information that should be protected.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to send unauthorized requests and disclose protected information...

The vulnerability of the IBM Security Verify Bridge software, which stems from the use of pre-installed credentials, allows a perpetrator to expose the protected information.

The vulnerability of the IBM Security Verify Bridge software relates to the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...