CVE-2020-8422

An authorization issue was discovered in the Credential Manager feature in Zoho ManageEngine Remote Access Plus before 10.0.450. A user with the Guest role can extract the collection of all defined credentials of remote machines: the credential name, credential type, user name, domain/workgroup...

Google Chrome Resource Management Error Vulnerability (CNVD-2020-00998)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability exists in versions of Google Chrome prior to 77.0.3865.75, which can be exploited by remote attackers to cause heap corruption with the help of specially crafted HTML pages...

Unspecified Vulnerability in HashBrown CMS

HashBrown CMS is an open source headless content management system CMS. A security vulnerability exists in the Server/Entity/Resource/Connection.js file in HashBrown CMS versions prior to 1.3.2. The vulnerability can be exploited by an attacker to access the parent directory with the help of a...

Telos Automated Message Handling System Information Disclosure Vulnerability

Telos Automated Message Handling System is an automated message handling system that automates the Web-based distribution and management of enterprise-wide organizational messages. An information disclosure vulnerability exists in itemlookup.asp in Telos Automated Message Handling System versions...

DEBIAN-CVE-2014-0048

An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways...

CVE-2019-18571

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain a reflected cross-site scripting vulnerability in the My Access Live module MAL. An authenticated malicious local user could potentially exploit this vulnerability by sending crafted...

CVE-2019-18833

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow Information exposure issue 2 of 2.. The encryption key of the media content which is shared between a ClickShare Button and a ClickShare Base Unit is randomly generated for each new session and communicated over a TLS connection. An...

UBUNTU-CVE-2019-13741

Insufficient validation of untrusted input in Blink in Google Chrome prior to 79.0.3945.79 allowed a local attacker to bypass same origin policy via crafted clipboard content...

DEBIAN-CVE-2019-5881

Out of bounds read in SwiftShader in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

UBUNTU-CVE-2019-5842

Use after free in Blink in Google Chrome prior to 75.0.3770.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2016-9652

Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75...

UBUNTU-CVE-2013-5123

The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...

SECUDOS DOMOS Log Module Directory Traversal Vulnerability

SECUDOS DOMOS is an operating system for IoT devices from SECUDOS Germany. log is one of the logging modules. A directory traversal vulnerability exists in the Log module in SECUDOS DOMOS versions prior to 5.6, which can be exploited by an attacker to read arbitrary files on the system by sending...

cPanel cross-site scripting vulnerability (CNVD-2019-34458)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the LiveAPI sample script in versions prior to cPanel 82.0.15. The vulnerability...

DEBIAN-CVE-2019-15163

rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service NULL pointer dereference and daemon crash if a crypt call fails...

CVE-2019-16743

eBrigade before 5.0 has evenementical.php evenement SQL Injection...

CVE-2019-3758

RSA Archer, versions prior to 6.6 P2 6.6.0.2, contain an improper authentication vulnerability. The vulnerability allows sysadmins to create user accounts with insufficient credentials. Unauthenticated attackers could gain unauthorized access to the system using those accounts...

Intel Authenticate Elevation of Privilege Vulnerability

Intel Authenticate is a set of multi-factor authentication software from the U.S. company Intel Intel. An elevation of privilege vulnerability exists in the software installer in versions prior to Intel Authenticate 3.8. A local attacker could exploit this vulnerability to gain elevation of...

Google Chrome URL bar spoofing vulnerability (CNVD-2019-32010)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 77.0.3865.75. A remote attacker can exploit the vulnerability to spoof the contents of the address bar with the help of a specially crafted website...

LimeSurvey Cross-Site Scripting Vulnerability (CNVD-2019-31351)

limesurvey is an open source online questionnaire program with multiple functions such as questionnaire design, modification, release, recovery and statistics. A stored cross-site scripting vulnerability exists in versions prior to Limesurvey 3.17.14. An attacker can exploit this vulnerability to...