CVE-2020-27586

CVE-2020-27586 affects Quick Heal Total Security before version 19.0, where quarantine and system information files are transmitted in clear text. The connected documents corroborate the product/version and the data exposed (quarantine and sysinfo) but do not provide detailed root cause, affected...

CVE-2020-27585

CVE-2020-27585 affects Quick Heal Total Security prior to 19.0. The issue allows an attacker with local administrator rights to modify sensitive antivirus settings by brute-forcing the settings password. This is a local-privilege scenario (attack vector: LOCAL, authentication: NONE, impact: HIGH ...

CVE-2020-27587: Weak Password Requirements

Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access to files in the File Vault via a brute-force attack on the password...

CVE-2020-27586: Cleartext Transmission of Sensitive Information

Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text...

CVE-2020-27585: Weak Password Requirements

Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify sensitive anti virus settings via a brute-attack on the settings password...

K7 Computing Quick Heal Total Security Security Vulnerability

K7 Computing Total Security is a suite of antivirus software for the Windows platform from K7 Computing, USA. A security vulnerability exists in Quick Heal Total Security prior to version 19.0, which stems from a vulnerability that allows an attacker to exploit the vulnerability with local...

PT-2020-16709

Name of the Vulnerable Software and Affected Versions Quick Heal Total Security versions prior to 19.0 Description The issue allows attackers with local admin rights to obtain access to files in the File Vault via a brute-force attack on the password. This can be exploited by attackers to gain...

PT-2020-16708

Name of the Vulnerable Software and Affected Versions Quick Heal Total Security versions prior to 19.0 Description The issue concerns the transmission of quarantine and sysinfo files via clear text. This means that sensitive information could be intercepted and read by unauthorized parties...

PT-2020-16707

Name of the Vulnerable Software and Affected Versions Quick Heal Total Security versions prior to 19.0 Description The issue allows attackers with local admin rights to modify sensitive anti-virus settings via a brute-force attack on the settings password. This can be exploited by attackers to...

K7 Computing Quick Heal Total Security Security Vulnerability

K7 Computing Total Security is a suite of antivirus software for the Windows platform from K7 Computing, USA. A security vulnerability exists in Quick Heal Total Security versions prior to 19.0, which can be exploited by an attacker with local administrative privileges to modify sensitive antivir...

Citrix Quick Launch v3

Important Note: This tool is for use with XenApp 6.5 /XenDesktop 5.6 and older only. Support for XenApp and XenDesktop 7.5 and later refer toCTX219718. Please note: You can download the required file from the Citrix downloads website by visiting the following...

November 3, 2020, update for Office 2016 (KB4484397)

None None...

Oracle Application Express Quick Data Compromise

The vulnerability of the Oracle Application Express Quick Poll component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality and integrity of the protected informati...

Nethive-Project - Restructured And Collaborated SIEM And CVSS Infrastructure

The Nethive Project provides a Security Information and Event Management SIEM insfrastructure empowered by CVSS automatic measurements. Features Machine Learning powered SQL Injection Detection Server-side XSS Detection based on Chrome's XSS Auditor Post-exploitation Detection powered by Auditbea...

Command Execution Vulnerability in Quick CAD-Cable Design 2020 (Windows Client)

Quick CAD - Cable Design 2020 is a cable CAD design software. A command execution vulnerability exists in Quick CAD-Cable Design 2020 Windows client. An attacker can exploit the vulnerability to execute arbitrary code...

ReQuest Serious Play F3 Media Server 7.0.3 - Remote Code Execution (Unauthenticated)

Exploit Title: ReQuest Serious Play F3 Media Server 7.0.3 - Remote Code Execution Unauthenticated Exploit Author: LiquidWorm Software Link: http://request.com/ Version: 3.0.0 !/usr/bin/env python3 -- coding: utf-8 -- ReQuest Serious Play F3 Media Server 7.0.3 Unauthenticated Remote Code Execution...

Oracle Database Server Express Quick Poll component privilege acquisition vulnerability

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A privilege-acquisition vulnerability exists in Oracle Database Server Express Quick Po...

CVE-2020-14763

Vulnerability in the Oracle Application Express Quick Poll component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise...

Design/Logic Flaw

Vulnerability in the Oracle Application Express Quick Poll component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise...

CVE-2020-14763

Vulnerability in the Oracle Application Express Quick Poll component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise...