CVE-2020-26899

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects CBR40 before 2.5.0.10, RBK752 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.10.11, RBR850 before 3.2.10.11, and RBS850 before 3.2.10.11...

PT-2021-7643 · Samba +6 · Samba +6

Name of the Vulnerable Software and Affected Versions: samba affected versions not specified Description: A flaw was found in samba, related to a race condition in the password lockout code. This issue may lead to the risk of brute force attacks being successful if special conditions are met,...

The vulnerability of the Adobe Photoshop graphic editor, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the Adobe Photoshop graphic editor, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the Adobe Photoshop graphic editor, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

PT-2020-4301 · Teclib +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.2 Description: The issue is related to a SQL Injection in the API's search function, allowing an attacker to break SQL syntax and utilize a UNION SELECT query to reflect sensitive information, such as the current...

The vulnerability of the systemd-tmpfiles program in SystemD allows a hacker to circumvent existing access restrictions and expose the protected information.

The vulnerability of the systemd-tmpfiles program in SystemD is related to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability could allow a attacker to circumvent existing access restrictions and disclose sensitive information by disabling the...

USN-4561-1 ruby-rack vulnerabilities

It was discovered that Rack incorrectly handled certain paths. An attacker could possibly use this issue to obtain sensitive information. CVE-2020-8161 It was discovered that Rack incorrectly validated cookies. An attacker could possibly use this issue to forge a secure cookie. CVE-2020-8184...

CVE-2019-18991

A partial authentication bypass vulnerability exists on Atheros AR9132 3.60AMX.8, AR9283 1.85, and AR9285 1.0.0.12NA devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a response is sen...

CVE-2019-18990

A partial authentication bypass vulnerability exists on Realtek RTL8812AR 1.21WW, RTL8196D 1.0.0, RTL8192ER 2.10, and RTL8881AN 1.09 devices. The vulnerability allows sending an unencrypted data frame to a WPA2-protected WLAN router where the packet is routed through the network. If successful, a...

The vulnerability of the Intel Converged Security and Manageability Engine implementation lies in the insufficient calculation of the password hash. This allows attackers to escalate their privileges, disclose sensitive information, or cause service failures.

The vulnerability of the Intel Converged Security and Manageability Engine implementation is related to insufficient calculation of the password hash. Exploiting this vulnerability can allow attackers to enhance their privileges, disclose protected information, or cause service failures...

The vulnerability of the Intel Converged Security and Manageability Engine implementation arises from the possibility of operations occurring outside the buffer in memory. This allows attackers to escalate their privileges, disclose sensitive information, or cause system failures.

The vulnerability of the Intel Converged Security and Manageability Engine implementation lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges, expose sensitive information, or cause service failures...

SQL Injection Vulnerability in JfinalOA

JfinalOA is a set of open source office OA system development framework. JfinalOA SQL injection vulnerability , an attacker can exploit the vulnerability to obtain sensitive database information...

The vulnerability of microprogrammed BIOS software in Intel processors allows attackers to enhance their privileges, cause system failures, or compromise the confidentiality of protected information.

The vulnerability of Intel processor BIOS microprogramming software is related to a logical error. Exploiting this vulnerability can allow an attacker to enhance their privileges, cause service failures, or compromise the confidentiality of protected information...

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the Win32k component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the win32k component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

XML External Entity (XXE)

JabRef version =4.3.1 contains a XML External Entity XXE vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted MsBib file...

CVE-2020-0313

In NotificationManagerService, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154917989...

Mail.ru: Логи на http://login.aa.mail.ru/logs/

Potentially sensitive application data disclosure via log files at aa.mail.ru...

CVE-2020-0338

In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-9Android ID: A-123700107...