CVE-2018-5382

CVE-2018-5382 involves Bouncy Castle where the default BKS keystore uses an HMAC only 16 bits long, enabling brute-force attempts to compromise keystore integrity. Technical details from connected docs show that BC 1.47 updated the BKS format to use a 160-bit HMAC, addressing the issue for keysto...

Default credentials

A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11. The default password is empty on the device. An unauthorized user can access the device without a password. An unauthorized user has the ability to completely...

CVE-2017-16727

A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11. The default password is empty on the device. An unauthorized user can access the device without a password. An unauthorized user has the ability to completely...

The vulnerability of the programmable logic controller S7-SoftPLC, related to the output of operations beyond the buffer in memory, allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the programmable logic controller S7-SoftPLC arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability in the task management of the 1x Android operating system from the CAF repository allows a perpetrator to compromise privacy, integrity, and accessibility.

The vulnerability in the task management of the 1x Android operating system arises from reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to compromise privacy, integrity, and accessibility...

CVE-2017-2318

The connected documents confirm CVE-2017-2318 affects Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1. An authenticated malicious user may read log files, compromising integrity, and may gain elevation of privileges. This is tied to the NorthStar Controller...

Design/Logic Flaw

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.1.4 in Oracle Virtualization allows remote attackers to affect confidentiality and integrity via vectors related to VRDE...

Unspecified Vulnerability in Oracle E-Business Suite Email Center

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 contain a security vulnerability in the Email Center component, which can be exploited by a remote attacker to compromise...

The vulnerability of the OpenOffice.org module of the LibreOffice office software package, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice.org module of the LibreOffice office software package is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the Flash Player software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Flash Player allows attackers to circumvent access restrictions...

The vulnerability of the Flash Player software allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Adobe Flash Player allows attackers to circumvent access restrictions...

The vulnerabilities in Acrobat software allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in Acrobat allows attackers to execute arbitrary code or trigger a service failure a memory corruption error...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

Multiple vulnerabilities exist in the browser engine of Mozilla Firefox, Firefox ESR, and Thunderbird. These vulnerabilities allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The numerous vulnerabilities in the Mozilla Firefox ESR browser engine allow malicious actors to trigger service failures memory errors and unexpected application termination or execute arbitrary code...

WordPoints: Weak Cryptographic Hash

Issue: The following files are vulnerable to this issue: \src\includes\class-breaking-updater.php line 246 and 247 protected function checkmodule $module $randstr = strshuffle md5 microtime ; $nonce = md5 $randstr . 'wordpointscheckmodules-' . $module ;...

Oracle Berkeley DB Local Unspecified Vulnerability (CNVD-2015-04789)

Oracle Berkeley DB is the industry's leading open source, embeddable storage engine that provides developers with a fast, reliable native database that requires no administration. A security vulnerability exists in the Oracle Berkeley DB Data Store component that can be exploited by a local...

Oracle PeopleSoft PeopleSoft Enteprise Portal - Unspecified Vulnerability in Interaction Hub Component

Oracle PeopleSoft Enterprise is an enterprise human capital management solution. A security vulnerability exists in the Oracle PeopleSoft Enterprise PeopleSoft Enteprise Portal - Interaction Hub component, which can be exploited by remote attackers to compromise system integrity...

Oracle Berkeley DB Local Unspecified Vulnerability (CNVD-2015-04788)

Oracle Berkeley DB is the industry's leading open source, embeddable storage engine that provides developers with a fast, reliable native database that requires no administration. A security vulnerability exists in the Oracle Berkeley DB Data Store component that can be exploited by a local...

The vulnerability of the Red Hat Enterprise Linux operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the kernel-debuginfo-2.6.18 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. The vulnerability can be exploited locally...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the pavuk package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...