LCDS LAquis SCADA Out-of-Bounds Read Vulnerability

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. An out-of-bounds read vulnerability exists in LCDS LAquis SCADA version...

LAquis SCADA out-of-bounds write vulnerability (CNVD-2019-02386)

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. An out-of-bounds write vulnerability exists in LCDS LAquis SCADA version...

LCDS LAquis SCADA Out-of-Bounds Write Vulnerability

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. An out-of-bounds write vulnerability exists in LCDS LAquis SCADA version...

Apple iOS, tvOS and OS X El Capitan CFNetwork Proxies Information Disclosure Vulnerability

Apple iOS, tvOS, and OS X El Capitan are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is an operating system for smart TVs; and OS X El Capitan is a purpose-built operating system for Mac computers.CFNetwork Proxies is a component of CFNetwork that handles prox...

The vulnerability of the Cisco Wireless LAN Controller’s web interface allows a perpetrator to disclose protected information.

The vulnerability of the Cisco Wireless LAN Controller web interface is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W network security gateway allows attackers to disclose protected information.

The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W wireless network security gateway lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose...

The vulnerability of the Core sub-component of the Oracle VM VirtualBox, which allows a hacker to disclose protected information

The vulnerability of the Core sub-component of the Oracle VM VirtualBox is related to insufficient access control. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W network security gateway allows a intruder to disclose or modify protected information.

The vulnerability in the code of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W wireless network security gateway lies in improper cleaning of data entered by users in HTTP requests. Exploiting this vulnerability allows a malicious actor to...

A vulnerability exists in the backup function of the Cisco Prime Infrastructure network monitoring and management system, which allows a intruder to disclose protected information.

The vulnerability in the backup function of the Cisco Prime Infrastructure monitoring and network equipment management system relates to the transmission of protected information in GET requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of Microsoft SQL Server Management Studio, related to errors in restricting XML references to external objects (XXE), allows attackers to disclose sensitive information.

The vulnerability of Microsoft SQL Server Management Studio is related to errors in restricting XML references to external objects XXE. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information using a specially crafted file...

The vulnerability of the web interface of Cisco Unified IP Phone 7900 Series software lies in the lack of measures taken to protect the website structure. This allows attackers to inject arbitrary code into the uploaded web pages or disclose protected information.

The vulnerability of the web interface of Cisco Unified IP Phone 7900 Series software lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the loaded web page or disclose protected...

The vulnerability of software for Cisco WebEx Events Center, Cisco WebEx Meeting Center, Cisco WebEx Support Center, and Cisco WebEx Training Center lies in the lack of protective measures for the website structure. This allows attackers to inject arbitrary code into the uploaded web pages or disclose protected information.

The vulnerability of software for Cisco WebEx Events Center, Cisco WebEx Meeting Center, Cisco WebEx Support Center, and Cisco WebEx Training Center relates to the lack of security measures for the web pages they operate on. Exploiting this vulnerability allows a malicious actor to inject arbitra...

Logisim Evolution XML External Entity Injection Vulnerability

Logisim Evolution is a tool for designing and simulating data logic circuits. An XML external entity injection vulnerability exists in the Circuit file loading feature in Logisim Evolution 2.14.3 and earlier versions, which can be exploited by an attacker to disclose information and potentially...

The vulnerability of the IBM QRadar SIEM system’s event collection and analysis process is related to improper restrictions on XML links to external objects. This allows attackers to disclose sensitive information or exploit memory resources.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow a malicious actor to disclose protected information or utilize memory resources...

The vulnerability in the local database of the Cisco Energy Management Suite allows a perpetrator to disclose or modify protected information.

The vulnerability of the configuration of the local database in the Cisco Energy Management Suite is related to the use of pre-installed registration data. Exploiting this vulnerability could allow an attacker to disclose or modify the protected information...

The vulnerability of the ContentProvider.java functions in the Android operating system allows attackers to disclose protected information.

The vulnerability of several functions in the ContentProvider.java file of the Android operating system is related to a path traversal error. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2018-3984 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 73.0.3683.75 Description: The issue is related to insufficient data validation in PDF files, which can allow a remote attacker to perform out of bounds memory access via a crafted PDF file. This can potentially...

Horner Automation Cscape Input Validation Vulnerability

Horner Automation Cscape is a set of programming software for industrial control system application development from Horner Automation. An input validation vulnerability exists in Horner Automation Cscape 9.80.75.3 SP3 and prior versions, which arises from a failure of the program to validate use...

exist-db:exist-core XML External Entity (XXE) vulnerability

exist version = 5.0.0-RC4 contains a XML External Entity XXE vulnerability in XML Parser for REST Server that can result in Disclosure of confidential data, denial of service, SSRF, port scanning...

GHSA-77HP-PFXW-4W63 XML External Entity (XXE) vulnerability in codelibs fess

codelibs fess version before commit faa265b contains a XML External Entity XXE vulnerability in GSA XML file parser that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via specially crafted GSA XML files. This...