Multiple F-Secure Internet Gatekeeper Products Information Disclosure Vulnerabilities

F-Secure Internet Gatekeeper is an antivirus product released by a Finnish antivirus vendor. An information disclosure vulnerability exists in several F-Secure Internet Gatekeeper products. An attacker could obtain sensitive information and launch other attacks...

CVE-2018-11036

Ruckus SmartZone formerly Virtual SmartCell Gateway or vSCG 3.5.0, 3.5.1, 3.6.0, and 3.6.1 Essentials and High Scale on vSZ, SZ-100, SZ-300, and SCG-200 devices allows remote attackers to obtain sensitive information or modify data...

CloudLock Win_3.1.6 suffers from SQL injection vulnerability

CloudLock is a free server security management software based on OS kernel hardening technology. CloudLock Win3.1.6 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2017-12060)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2017-12788)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information...

Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2017-06610)

Microsoft Windows is the popular computer operating system. The Windows kernel does not properly handle memory objects and is implemented with a local information disclosure vulnerability that, when successfully exploited, allows an attacker to obtain sensitive information...

Hitek Software Automize Information Disclosure Vulnerability (CNVD-2017-05643)

Hitek Software Automize is an automation software suite from HitekSoftware that increases productivity and saves time. An information disclosure vulnerability exists in Hitek Software Automize. An attacker could exploit the vulnerability to obtain sensitive information...

Google Chrome Blink Information Disclosure Vulnerability (CNVD-2017-03627)

Google Chrome is a web browser developed by the American company Google Google. Google Chrome Blink suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Chrome Devtools Unauthorized File Access Vulnerability

Google Chrome is a popular web browser. An unauthorized file access vulnerability exists in Google Chrome Devtools, which allows remote attackers to exploit the vulnerability to build malicious web pages that can be parsed by the user and can be used to obtain sensitive information...

Apereo Webproxy Portlet Information Disclosure Vulnerability

Apereo Central Authentication Service CAS Server is a Jasig project under the Apereo Foundation that provides a trusted way for authenticated users to access applications. An information disclosure vulnerability exists in Apereo Webproxy Portlet versions prior to 2.2.2. An attacker could exploit...

Google Android Qualcomm Component Information Disclosure Vulnerability (CNVD-2016-11051)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An information disclosure vulnerability exists in the Google Android Qualcomm component. An attacke...

Microsoft Windows Graphics Component Information Disclosure Vulnerability (CNVD-2016-09365)

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in the Windows Graphics Device Interface GDI processing memory object. An attacker could exploit this vulnerability to obtain sensitive information on the target system...

Adobe Flash Player Information Disclosure Vulnerability (CNVD-2016-07667)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from the American company Adobe. An information disclosure vulnerability exists in Adobe Flash Player, which can be exploited by attackers to bypass established access restrictions and obtain sensitive information...

SSD Firmware Information Disclosure Vulnerability in Multiple Lenovo Products

An information disclosure vulnerability exists in the SSD firmware of multiple Lenovo products. An attacker can exploit the vulnerability to obtain sensitive information, which could lead to further attacks...

File Inclusion Vulnerability in the fileservice/FileManage.asmx?op page of the SmartLearning system of Xinwei Software

SmartLearning system of Shenzhen Xinwei Software Co., Ltd. is an online learning platform. A file inclusion vulnerability exists in the fileservice/FileManage.asmx?op page of the SmartLearning system of Xinwei Software. An attacker can use the vulnerability to download website files and obtain...

NetApp MetroCluster Tiebreaker for clustered Data ONTAP Information Disclosure Vulnerability

NetApp Clustered Data ONTAP is a set of storage operating system for clustered mode from the American company NetApp. An information disclosure vulnerability exists in NetApp MetroCluster Tiebreaker for clustered Data ONTAP, which allows remote attackers to submit a special request to obtain...

Linux kernel local information disclosure vulnerability (CNVD-2016-05852)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local information disclosure vulnerability exists in Linux kernel, which can be exploited by local attackers to obtain sensitive information...

Lepton memory corruption vulnerability (CNVD-2016-05179)

Lepton is a set of tools for lossless compression of JPEG format files. A memory corruption vulnerability exists in Lepton, which can be exploited by attackers to obtain sensitive information and cause a denial of service...

CVE-2016-2022

HPE Systems Insight Manager SIM before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2030...

Multiple Vulnerabilities in HPE Matrix Operating Environment (CNVD-2016-03743)

HPE Matrix Operating Environment is a suite of cloud management software designed for infrastructure services. HPE Matrix Operating Environment has multiple security vulnerabilities that could be exploited by remote attackers to obtain sensitive information, execute arbitrary code, gain...