Google Android Information Disclosure Vulnerability (CNVD-2020-60499)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in the Android-11 version of PackageManager, which stems from a lack of privilege checking, and can be exploited by an attacker to leak local information...

The vulnerability of the File Server Resource Manager, a component of the Windows operating system, allows attackers to increase their privileges.

The vulnerability of the File Server Resource Manager in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

IBM API Connect elevation of privilege vulnerability (CNVD-2020-50792)

IBM API Connect is a comprehensive end-to-end API lifecycle solution. An elevation of privilege vulnerability exists in API Manager for IBM API Connect 2018.4.1.0 through 2018.4.1.12, which can be exploited by an invitee of an API provider organization to elevate privileges by manipulating the...

CVE-2020-24312

mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fmbackups directory with a .htaccess file. This results in the ability for unauthenticated users to browse and download any site backups, which sometimes include full database backups, that the plugin has taken...

The vulnerability of the Red Hat Process Automation Manager system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure in the target system.

The vulnerability of the Red Hat Process Automation Manager system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures in the target system by sending specially crafted HTTP packets remotely...

The vulnerability of the fly-fm file manager is related to an error in data processing through drag-and-drop, which allows a malicious actor to cause a service failure.

The vulnerability of the fly-fm file manager is related to an error in data processing through the drag-and-drop method for manipulating interface elements. Exploiting this vulnerability can allow attackers to cause service failures...

CVE-2020-3376

A vulnerability in the Device Manager application of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions on an affected device. The vulnerability is due to a failure in the software to perform proper...

The vulnerability of the Wildfly Security platform’s manager in Red Hat JBoss Operations Network allows a perpetrator to gain access to protected information.

The vulnerability of the Wildfly Security platform’s manager in the Red Hat JBoss Operations Network is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to protected information...

USN-4359-1 apt vulnerability

It was discovered that APT incorrectly handled certain filenames during package installation. If an attacker could provide a specially crafted package to be installed by the system administrator, this could cause APT to crash...

CVE-2020-6805

When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 68.6, Firefox 74, Firefox ESR68.6, and Firefox ESR 68.6...

CVE-2020-10667

The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Stored XSS in /TemplateManager/indexExternalLocation.jsp. The vulnerable parameter is maptemplatename. NOTE: this is fixed in the latest version...

Security update for Windows 10, version 1507, Windows 8.1, Server 2012 R2, and Server 2012: February 11, 2020

Security update for Windows 10, version 1507, Windows 8.1, Server 2012 R2, and Server 2012: February 11, 2020 This standalone security update has been removed due to an issue affecting a sub-set of devices. It will not be re-offered from Windows Update, Windows Server Update Services WSUS or...

The vulnerability of the IBM Security Identity Manager software lies in the lack of measures to sanitize input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of the IBM Security Identity Manager software is related to the lack of measures for cleaning input data. Exploiting this vulnerability could allow a malicious actor operating remotely to execute arbitrary code...

Symantec Endpoint Protection Manager Information Disclosure Vulnerability (CNVD-2020-09957)

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. Symantec Endpoint Protection Manager suffers from an information disclosure vulnerabilit...

CVE-2020-2608

Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Repository. Supported versions that are affected are 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Enterprise...

Cisco Data Center Network Manager addGroupNavigation XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cisco Data Center Network Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of requests to the addGroupNavigation SOAP...

The vulnerability of the lmgrd component and the components of the FlexNet Publisher daemon vendor license manager allows a violator to trigger a service failure.

The vulnerability of the lmgrd component and the components of the FlexNet Publisher daemon are related to errors in message processing within the lmadmin service. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the safer_name_suffix function in the GNU Tar archive manager allows a hacker to bypass the intended security measures and write data to arbitrary files.

The vulnerability of the safernamesuffix function in the GNU Tar archive manager exists due to an incorrect restriction on the pathname to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to bypass the intended security measures and write to arbitrary...

CVE-2019-2899

Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware component: OAM. Supported versions that are affected are 11.1.1.9.0, 11.1.2.4.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromis...

CVE-2019-11661

Allow changes to some table by non-SysAdmin in Micro Focus Service Manager product versions 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. This vulnerability could be exploited to allow unauthorized access and modification of data...