Memory Override Access Vulnerability in QQ Music Client

QQ Music client is Tencent's music playback software. A memory override access vulnerability exists in the qmpmp3.dll module of the QQ Music client when parsing a specific mp3, which can be exploited by an attacker to cause a denial of service...

Microtransit EV Android App has an override access vulnerability

Microbus EV APP is a car time-share rental service software. Microtransit EV Android APP has an override access vulnerability. After logging into the system, an attacker can view any account information, including user's name, cell phone number, ID number, account amount and other sensitive...

E-Charge APP for Android suffers from an override access vulnerability

E-Charge APP is a car charging service application, providing users with convenient electric vehicle charging functions, so that users can automatically check the nearest charging piles through the navigation, fast charging, and experience a green traveling life. E-Charge APP Android version of t...

Kandi Car Share Android app has an override access vulnerability

Car Sharing app is a new energy car time-sharing platform. The Kandi Car Sharing Android app suffers from an override access vulnerability. An attacker using this vulnerability can view arbitrary account information and disclose the user's name, ID number, and cell phone number...

Override Access Vulnerability in MicrosRock v1.0

Microscale is a free and open source microsoft public number management system. An override access vulnerability exists in Weixin v1.0. The vulnerability is due to bootstrap.sys.inc.php failing to make strict judgments on permissions that allows a remote attacker to perform an override and gain...

Wheat Pro Android App suffers from an overstepping access vulnerability

Wheat Pro app is a mobile office software that integrates PV plant monitoring, work order processing, PV plant troubleshooting and other functions. Wheat Pro Android App has an override access vulnerability. Attackers can use the vulnerability to arbitrarily view the user's cell phone number,...

Wheat Home Edition Android App Has Override Access Vulnerability

Wheat Home Edition app is a video surveillance software that provides PV monitoring services. Wheat Home Edition Android App suffers from an override access vulnerability. Attackers can utilize the vulnerability to arbitrarily view sensitive information such as user's cell phone number, email...

Vulnerabilities in the Teaching Management System of Shenzhen Longchuang Software Co.

The Academic Affairs Management System AAMS is based on the campus network/Internet to provide advanced and practical information management means for school teaching operation, and to provide students, teachers, teaching assistants and management personnel with simple and fast networked...

360 Compressor has an override access vulnerability

360 Compress is a free decompression software from 360. An over-the-horizon access vulnerability exists in 360 Zip. The vulnerability is due to 360zipc.dll writing data to a NULL address, allowing an attacker to exploit the vulnerability to execute code...

IBM InfoSphere Master Data Management Security Bypass Vulnerability (CNVD-2017-21237)

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

Guizhou Provincial People's Hospital's Android App Has Override Access Vulnerability

Guizhou Provincial People's Hospital APP is a medical app for local people in Guizhou, making it easier and faster for people to see a doctor. Download Guizhou Provincial People's Hospital APP to utilize ID cards, visiting cards and other identification to get all the information about the visit,...

Design/Logic Flaw

HTTP Parameter Override is identified in the IBM Infosphere Master Data Management MDM 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploite...

CVE-2016-9717

HTTP Parameter Override is identified in the IBM Infosphere Master Data Management MDM 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploite...

CVE-2016-9717

HTTP Parameter Override is identified in the IBM Infosphere Master Data Management MDM 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It enables attackers by exposing the presence of duplicated parameters which may produce an anomalous behavior in the application that can be potentially exploite...

CVE-2016-9717

CVE-2016-9717 affects IBM InfoSphere Master Data Management Server versions 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6. Described as an HTTP Parameter Override that reveals duplicated parameters, potentially causing anomalous application behavior that can be exploited. IBM’s Security Bulletin provide...

SUSE-SU-2017:1997-1 Security update for apache2

This update provides apache2 2.2.34, which brings many fixes and enhancements: Security issues fixed: - CVE-2017-9788: Uninitialized memory reflection in modauthdigest. bsc1048576 Bug fixes: - Remove /usr/bin/http2 link only during package uninstall, not upgrade. bsc1041830 - Don't put the backen...

Fusion K2 wireless router suffers from an override access vulnerability

The Fusion K2 PSG1218 router is a new generation of wireless routers for entry-level users. The Fusion K2 wireless router is vulnerable to an override access vulnerability. An attacker can use the vulnerability to obtain the details of all end devices in the LAN without logging in, and also perfo...

Micro OA365 WeChat Office System suffers from an override access vulnerability

Micro OA365 is an excellent free microsoft office platform software. Micro OA365 WeChat Office System suffers from an override access vulnerability. An attacker can exploit the vulnerability to jump to other arbitrary pages...

Fedora 26 : php-pear-PHP-CodeSniffer (2017-b85d51cc47)

Version 3.0.1 - This release contains a fix for a security advisory related to the improper handling of a shell command - A properly crafted filename would allow for arbitrary code execution when using the --filter=gitmodified command line option - All version 3 users are encouraged to upgrade to...

Guangdong Radio and Television Network HD Digital Cable TV Receiver H2600 suffers from an over-authorized access vulnerability

HD Digital Cable Receiver H2600 is a terminal equipment for TV broadcasting system developed by Guangdong Broadcasting TV Network Co. The Guangdong Broadcasting Television Network HD Digital Cable Receiver H2600 suffers from an override access vulnerability, which can be exploited by an attacker ...