Nablarch Denial of Service Vulnerability

Nablarch is a Java application framework based on the middleware model . A security vulnerability exists in Nablarch versions 5, 5u1, and 5u13. A remote attacker could exploit the vulnerability to disclose information or cause a system shutdown...

CVE-2019-1995

In ComposeActivityEmail of ComposeActivityEmail.java, there is a possible way to silently attach files to an email due to a confused deputy. This could lead to local information disclosure, sending files accessible to AOSP Mail to a remote email recipient, with no additional execution privileges...

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially crafted document or web page...

GNU Binutils Heap Buffer Overflow Vulnerability (CNVD-2019-22420)

GNU Binutils is a set of programming tools for creating and managing binary programs, object files, libraries, profile data and assembly source code. A bfdarchive64bitslurparmap heap buffer overflow vulnerability in archive64.c in the Binary File Descriptor BFD library i.e. libbfd used in GNU...

The vulnerability in the web interface of the software for centralized management of Cisco TelePresence Systems allows a perpetrator to execute arbitrary code and disclose protected information.

The vulnerability in the web interface of the Cisco TelePresence Management Suite software for centralized control of video systems exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code a...

Google Chrome DevTools Injection Vulnerability

Google Chrome is the American Google Google company's a Web browser. Devtools is one of the development and debugging tools. A security vulnerability exists in DevTools in versions of Google Chrome prior to 72.0.3626.81, which arises from the program not adequately validating untrusted input. The...

Mail.ru: Раскрытие информации о совершенных операциях

History API in pandao.ru could disclosure non-personalized data about last operations...

Information disclosure

SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, Illuminator Servlet currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application...

Adobe Acrobat/Reader Data Disclosure Vulnerability

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. A data disclosure vulnerability exists in Adobe Acrobat/Reader. An attacker could exploit this vulnerability to obtain information...

FreeBSD Input Validation Vulnerability

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD. An attacker could exploit this vulnerability to disclose kernel data used in system calls...

CVE-2019-7535

index.php in Gurock TestRail 5.3.0.3603 returns potentially sensitive information for an invalid request, as demonstrated by full path disclosure and the identification of PHP as the backend technology...

CVE-2019-7535

CVE-2019-7535 affects Gurock TestRail, specifically the index.php endpoint in version 5.3.0.3603. The issue leaks potentially sensitive information when handling an invalid request, demonstrated by full path disclosure and confirmation that PHP is used as the backend technology. The available doc...

Access Control Bypass

slixmpp is vulnerable to access control bypass. The vulnerability exists because the default permissions for persistent storage of private data on a PEP node is not set properly, disclosing private data that have been published to a PEP node to all the contacts of the victim...

CVE-2018-15658

CVE-2018-15658 affects 42Gears SureMDM (pre-2018-11-27). The issue arises when session validation runs after initial markup on /console/ConsolePage/Master.html, allowing an attacker to view the markup that would be shown to an authenticated user and, per the vulnerability description, access unpr...

CVE-2018-19724

Adobe Experience Manager Forms versions 6.2, 6.3 and 6.4 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2018-19727

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2018-19726

Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

PT-2019-18293 · Foxit · Foxit Phantompdf

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF affected versions not specified Description: This issue allows remote attackers to disclose sensitive information on vulnerable installations. It requires user interaction, such as visiting a malicious page or opening a...

Adobe Experience Manager Forms Cross-Site Scripting Vulnerability

Adobe Experience Manager Forms is the United States of America Odobie Adobe company's set of solutions for form content management. The product is mainly used to synchronize form data. A cross-site scripting vulnerability exists in Adobe Experience Manager Forms versions 6.4, 6.3, and 6.2. A remo...

The vulnerability of the web interface of Cisco IP Phone 8800 Series software allows a intruder to inject arbitrary code into the uploaded web page or disclose protected information.

The vulnerability of the web interface of Cisco IP Phone 8800 Series software lies in errors in the validation of data provided by users. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the web page that is loaded, or to disclose protected information...