7633 matches found
Moderate: Red Hat Security Advisory: ansible security update
An update for ansible is now available for Red Hat OpenStack Platform 14.0 Rocky. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Trend Micro Discloses Insider Threat Impacting Some of its Consumer Customers
We recently became aware of a security incident that resulted in the unauthorized disclosure of some personal data of an isolated number of customers of our consumer product. We immediately started investigating the situation and found that this was the result of a malicious insider threat. The...
YouPHPTube LiveChat Plugin SQL Injection Vulnerability
YouPHPTube is an open source YouTube clone script. A SQL injection vulnerability exists in the LiveChat plugin in YouPHPTube 7.7 and earlier versions. The vulnerability stems from a failure to properly validate user input passed via the livestreamcode POST parameter to...
The vulnerability of the Client programs component of the MySQL Server database management system allows attackers to disclose sensitive information.
The vulnerability of the Client programs in the MySQL Server database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose the protected information...
CVE-2019-18227
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data...
CVE-2019-18227
Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data...
CVE-2019-18227
CVE-2019-18227 affects Advantech WISE-PaaS/RMM, versions 3.3.29 and prior. The vulnerability is an XML External Entity (XXE) processing flaw in the RecoveryMgmt/AccountMgmt/other XML parsing paths that can allow a remote attacker to disclose sensitive data from the target system. Public descripti...
ClipSoft REXPERT File Upload Vulnerability
ClipSoft REXPERT is a report generation program from ClipSoft Korea. A file upload vulnerability exists in ClipSoft REXPERT. The vulnerability can be exploited by an attacker to upload arbitrary local files and disclose sensitive information via ActiveX methods...
CVE-2019-17325
ClipSoft REXPERT 1.0.0.527 and earlier version allows remote attacker to upload arbitrary local file via the ActiveX method in RexViewerCtrl30.ocx. That could lead to disclosure of sensitive information. User interaction is required to exploit this vulnerability in that the target must visit a...
CVE-2019-4311
IBM Security Guardium Big Data Intelligence SonarG 4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 161037...
SQL injection vulnerability in zzzphp sa***.php page
zzphp is a free website builder developed in PHP language. A SQL injection vulnerability exists in the zzzphp sa.php page, which can be exploited by attackers to obtain sensitive information...
The vulnerability of the audioflinger component in the Android operating system, which allows a hacker to disclose protected information
The vulnerability of the audioflinger component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...
IBM Security Directory Server Input Validation Error Vulnerability
IBM Security Directory Server is a suite of enterprise identity management software from IBM USA that uses the Lightweight Directory Access Protocol LDAP. The software provides a trusted identity data infrastructure for authentication. An input validation error vulnerability exists in IBM Securit...
Vulnerability of the refresh_progress_meter() function (progressmeter.c) in the OpenSSH cryptographic protection mechanism, which allows an attacker to disclose protected information or execute arbitrary code.
The vulnerability of the refreshprogressmeter function in the progressmeter.c file of the OpenSSH cryptographic protection mechanism is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or execute arbitrary code...
The vulnerability of the HTTP/2 network protocol implementation in the Apache HTTP Server allows for uncontrolled resource consumption, enabling attackers to disclose sensitive information.
The vulnerability of the HTTP/2 network protocol implementation in the Apache HTTP Server is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...
CVE-2019-5538
Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over SCP...
CVE-2019-14926
An issue was discovered on Mitsubishi Electric Europe B.V. ME-RTU devices through 2.02 and INEA ME-RTU devices through 3.0. Hard-coded SSH keys allow an attacker to gain unauthorised access or disclose encrypted data on the RTU due to the keys not being regenerated on initial installation or with...
SQL injection vulnerability in ad***_to***.php file en*** parameter in seacms backend
seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adto.php file en parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...