3967 matches found
CVE-2020-10674
PerlSpeak through 2.01 allows attackers to execute arbitrary OS commands, as demonstrated by use of system and 2-argument open...
UBUNTU-CVE-2019-19210
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...
Shanghai Yiso Network Technology Co., Ltd. ShopsN open source mall system v3.0.0 aj*** function there are SQL injection vulnerabilities
ShopsN open source mall system is a product of Shanghai Yisu Network Technology Co. Ltd. ShopsN open source mall system v3.0.0 aj function there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...
Johnson Controls Kantech EntraPass Input Validation Error Vulnerability
Johnson Controls Kantech EntraPass is a menu-driven security management system from Johnson Controls, Inc. An input validation error vulnerability exists in the SmartService API Service option in Johnson Controls Kantech EntraPass Corporate Edition 8.0 and earlier and Kantech EntraPass Global...
SQL Injection Vulnerability in CloudYou CMS Ma***.php File
CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. CloudUnion CMS Ma.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain database sensitive information...
Google Chrome Information Disclosure Vulnerability (CNVD-2020-14821)
Google Chrome is a web browser from Google, an American company. An information disclosure vulnerability exists in Google Chrome versions prior to 3.0, which stems from the program's failure to properly process XML documents. A remote attacker could exploit the vulnerability to obtain sensitive...
IBM Security Identity Manager Trust Management Issues Vulnerability
IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...
CVE-2020-9340
fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...
DEBIAN-CVE-2013-4090
Varnish HTTP cache before 3.0.4: ACL bug...
Google Android Framework Information Disclosure Vulnerability (CNVD-2020-07206)
Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the Framework component of Google Android 8.0, 8.1, 9, and 10. No details of the vulnerability are available at this tim...
Important: Red Hat Enhancement Advisory: Red Hat OpenStack Platform 16.0 GA
Updated packages that fix several bugs and add various enhancements are now available for Red Hat OpenStack Platform 16.0 Train for RHEL 8.1. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service IaaS cloud runnin...
CVE-2019-4568
IBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS could allow a remote attacker with intimate knowledge of the server to cause a denial of service when receiving data on the channel. IBM X-Force ID: 166629...
Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2020-16652)
Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web applications, Internet of Things applications, and mobile backends. A denial of service vulnerability exists in Microsoft ASP.NET Core...
CVE-2020-2723
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HT...
CVE-2020-2649
Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications component: Internal Operations. The supported version that is affected is 16.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...
SUSE-SU-2020:0104-1 Security update for nodejs10
This update for nodejs10 to version 10.18.0 fixes the following issues: Security issues fixed: - CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field bsc1159352. - Added support for chacha20-poly1305 for Authenticated...
PT-2020-15300 · Cloudbees +1 · Jenkins Health Advisor By Cloudbees Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Health Advisor by CloudBees Plugin versions 3.0 and earlier Description: A missing permission check in the plugin allows attackers with Overall/Read permission to send a fixed email to an attacker-specific recipient. The form validati...
DEBIAN-CVE-2020-1767
Agent A is able to save a draft i.e. for customer reply. Then Agent B can open the draft, change the text completely and send it in the name of Agent A. For the customer it will not be visible that the message was sent by another agent. This issue affects: OTRS Community Edition 6.0.x version...
CVE-2020-1787
HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139C00E133R3P1 have an improper authentication vulnerability. The system has a logic error under certain scenario, successful exploit could allow the attacker who gains the privilege of guest user to access to the host user's desktop in an...