PT-2020-10564 · Samsung · Teegris +1

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software Description: The issue is related to type confusion in the FINGERPRINT Trustlet, which can lead to arbitrary code execution. Recommendations: For Samsung mobile devices with O8.1...

Opencast License Issue Vulnerability (CNVD-2020-12671)

Opencast is a free and open source video management solution that is scalable, customizable and low cost. An authorization issue vulnerability exists in Opencast versions prior to 7.6 and prior to 8.1. The vulnerability stems from a lack of authentication measures or insufficient authentication...

Google Android Framework Information Disclosure Vulnerability (CNVD-2020-07206)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the Framework component of Google Android 8.0, 8.1, 9, and 10. No details of the vulnerability are available at this tim...

Important: Red Hat Enhancement Advisory: Red Hat OpenStack Platform 16.0 GA

Updated packages that fix several bugs and add various enhancements are now available for Red Hat OpenStack Platform 16.0 Train for RHEL 8.1. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service IaaS cloud runnin...

IBM Spectrum Protect Backup-Archive Client Denial of Service Vulnerability

IBM Spectrum Protect Backup-Archive Client is a set of client programs for IBM Spectrum Protect file backup and archiving from IBM USA. A security vulnerability exists in IBM Spectrum Protect Backup-Archive Client versions 8.1.0.0 through 8.1.8.0 and 7.1.0.0 version 7.1.8.6. An attacker could...

Google Android elevation of privilege vulnerability (CNVD-2019-37955)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in Google Android 8.0, 8.1, and 9. The vulnerability stems from a package installation local user interaction...

UBUNTU-CVE-2019-15739

An issue was discovered in GitLab Community and Enterprise Edition 8.1 through 12.2.1. Certain areas displaying Markdown were not properly sanitizing some XSS payloads...

CVE-2019-16101

Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON data to the REST API, such as the rest/json/banners URI...

GitLab Cross-Site Scripting Vulnerability (CNVD-2019-31313)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A cross-site scripting vulnerability exists in GitLab...

Atlassian Jira Denial of Service Vulnerability (CNVD-2019-32324)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A denial of service vulnerability exists in Atlassian Jira versions prior to 8.1.0, which can be exploited by remote attackers t...

JDK: Unspecified vulnerability fixed in 7u221 and 8u211 (2D)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: 2D. Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of...

CVE-2018-1787

IBM Spectrum Protect 7.1 and 8.1 is affected by a password exposure vulnerability caused by insecure file permissions. IBM X-Force ID: 148872...

CVE-2019-2431

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Console. Supported versions that are affected are 8.1 and 8.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus Safety...

CVE-2018-8622

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

CVE-2018-1785

IBM Tivoli Storage Manager IBM Spectrum Protect 7.1 and 8.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information. IBM X-Force ID: 148870...

PT-2018-5060 · Information Builders · Webfocus Business Intelligence Portal

Name of the Vulnerable Software and Affected Versions: Information Builders WebFOCUS Business Intelligence Portal version 8.1 Description: A command execution issue exists due to a specially crafted web parameter that can cause command injection. An authenticated attacker can exploit this by...

Google Android Media framework remote code execution vulnerability (CNVD-2018-18769)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in the Media framework in Android versions 8.0 and 8.1. A...

CVE-2018-9866

A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management System GMS virtual appliance's, allow remote user to execute arbitrary code. This vulnerability affected GMS version 8.1 and earlier...

Google Android System Information Disclosure Vulnerability (CNVD-2018-16197)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Google Android versions 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. An attacker can exploit this...

Polaris Office Arbitrary Code Execution Vulnerability

Infraware Polaris Office is a suite of office software developed by Infraware Korea for mobile devices. The software is mainly used for viewing and editing Word documents, Excel tables, PowerPoint files and so on. A security vulnerability exists in Infraware Polaris Office 2017 version 8.1. An...