137 matches found
PT-2021-6270
Name of the Vulnerable Software and Affected Versions NETGEAR D7000 versions prior to 1.0.1.82 Description The issue is caused by a stack-based buffer overflow. This can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information. An...
CVE-2021-31381: Exposure of Sensitive Information to an Unauthorized Actor
A configuration weakness in the JBoss Application Server AppSvr component of Juniper Networks SRC Series allows a remote attacker to send a specially crafted query to cause the web server to delete files which may allow the attacker to disrupt the integrity and availability of the system...
PT-2021-6236
Name of the Vulnerable Software and Affected Versions NETGEAR R6260 versions prior to 1.1.0.76 NETGEAR R6800 versions prior to 1.2.0.62 NETGEAR R6700v2 versions prior to 1.2.0.62 NETGEAR R6900v2 versions prior to 1.2.0.62 NETGEAR R7450 versions prior to 1.2.0.62 NETGEAR AC2100 versions prior to...
PT-2021-5252
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 93.0.4577.63 Microsoft Edge affected versions not specified Description The issue is related to a use after free in the Bookmarks component, which can be exploited by an attacker to impact the confidentiality,...
PT-2021-3931
Name of the Vulnerable Software and Affected Versions Akkadian Provisioning Manager Engine versions prior to 5.0.2 Akkadian OVA appliance versions prior to 3.0 Akkadian Appliance Manager versions prior to 3.3.0.314-4a349e0 Description The issue allows an attacker to bypass the restricted shell...
SAP Solution Manager Missing Authentication Check Vulnerability (CNVD-2020-62930)
SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...
CVE-2020-26822: Missing Authentication for Critical Function
SAP Solution Manager JAVA stack, version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Outside Discovery Configuration Service, this has an impact to the integrity and availability of the service...
Exploit for Missing Authentication for Critical Function in Sap Netweaver_Application_Server_Java
CVE-2020-6287 SAP NetWeaver AS JAVA LM Configuration Wizard...
PT-2020-6132
Name of the Vulnerable Software and Affected Versions phpzag live add edit delete data tables records with ajax php mysql affected versions not specified Description The issue is related to a lack of protection against SQL query structure exploitation, potentially allowing a remote attacker to...
PT-2020-5303
Name of the Vulnerable Software and Affected Versions D-Link DSL-2640B versions prior to the fixed version Description The issue is caused by a stack-based buffer overflow in the do cgi function, which processes CGI requests supplied to the device's web server. This can be exploited remotely,...
Unspecified Vulnerability in Oracle Outside In Technology (CNVD-2020-09667)
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. An...
PT-2019-5113
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 77.0.3865.120 Description The issue is related to a use after free in JavaScript, which can lead to heap corruption. A remote attacker could potentially exploit this to gain unauthorized access to information an...
Privilege Escalation
mysql is vulnerable to privilege escalation. An unspecified vulnerability allows remotely authenticated users to affect integrity and availability via vectors related to SRCHAR...
PT-2019-1142
Name of the Vulnerable Software and Affected Versions: Juniper ATP versions prior to 5.0.3 Description: The issue is related to the logging of sensitive keys in a file that can be read by authenticated local users. These keys are used for critical operations on the WebUI interface. The problem is...
PT-2018-3499
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.18 Description: The issue is related to a use after free in the fs/xfs/xfs super.c component of the Linux kernel. This could allow an attacker to gain unauthorized access to information and compromise its...
PT-2017-3693
Name of the Vulnerable Software and Affected Versions: Android versions prior to security patch level 2018-04-05 Description: The issue is related to an out-of-bounds access in the tz assign function, potentially allowing a remote attacker to impact the confidentiality, integrity, and availabilit...
PT-2017-12427
Name of the Vulnerable Software and Affected Versions Cisco Cloud Services Platform CSP 2100 versions 2.1.0 through 2.2.2 Description A weakness in the generation of certain authentication mechanisms in the URL of the web console could allow an authenticated, remote attacker to interact malicious...
PT-2017-3058
Name of the Vulnerable Software and Affected Versions EMC Elastic Cloud Storage ECS versions prior to 3.1 Description The issue is related to an undocumented account vulnerability that could be leveraged by malicious users to compromise the system. It is also associated with the use of a...
PT-2017-3582
Name of the Vulnerable Software and Affected Versions: Android for MSM versions affected versions not specified QRD Android versions affected versions not specified Firefox OS for MSM versions affected versions not specified All Android releases from CAF using the Linux kernel versions affected...
PT-2017-2713
Name of the Vulnerable Software and Affected Versions Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is related to a missing buffer length validation in a PlayReady DRM routine. This could potentially allow a remote...