Multiple Apple Products GeoServices Component Authorization Issue Vulnerability

Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple iPadOS is an operating system for iPad tablets. geoServices is a geo-services component of the... A security vulnerability exists in the...

Kronos WebTA SQL Injection Vulnerability

Kronos WebTA is an attendance system. Kronos WebTA suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to read sensitive data from the database...

CVE-2020-3335

A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive information of other users on an affected device. The vulnerability is due to insufficient authorization limitations. An attacker could exploit this...

CVE-2020-3312

A vulnerability in the application policy configuration of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data on an affected device. The vulnerability is due to insufficient application identification. An...

Craft CMS Server-Side Template Injection Vulnerability

Craft CMS is a content management system CMS for developers and content managers. A security vulnerability exists in Craft CMS 3.0.34 and prior versions. A remote attacker could exploit the vulnerability to read sensitive information...

CVE-2018-1380

IBM InfoSphere Master Data Management Collaboration Server 11.4, 11.5, and 11.6 could allow an authenticated user with CA level access to change change their ca-id to another users and read sensitive information. IBM X-Force ID: 138077...

GIMP File Creation Vulnerability

GIMP GNU Image Manipulation Program, GNU Image Manipulation Program is a cross-platform open source image processing software developed by the GIMP team. The software enables a variety of image processing, including photo retouching, image compositing and image creation. A security vulnerability...

CVE-2018-12594

Reliable Controls MACH-ProWebCom 7.80 devices allow remote attackers to obtain sensitive information via a direct request for the data/fileinfo.xml or job/job.json file, as demonstrated the Master Password field...

Security Status Management Vulnerability in Multiple Apple Products

Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems. iCloud for Windows is a cloud service based on the Windows platform. Security ...

Google Android Qualcomm Wi-Fi Driver Information Disclosure Vulnerability (CNVD-2017-31678)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Qualcomm Wi-Fi Driver is a wireless driver component. An information disclosure vulnerability exists in the Qualcomm Wi-Fi Driver in Android. The vulnerability can be...

Oracle MICROS POS missing authorisation check

Application: Oracle MICROS POS Versions Affected: Oracle Hospitality Simphony 2.7-2.9 Vendor URL: Oracle Bug: Missing Authentication for Critical Function Reported: 21.07.2017 Vendor response: 22.07.2017 Date of Public Advisory: 17.01.2018 Reference: Oracle CPU January 2018 Author: Dmitry Chastuh...

CVE-2016-6718

An elevation of privilege vulnerability in the Account Manager Service in Android 7.0 before 2016-11-01 could enable a local malicious application to retrieve sensitive information without user interaction. This issue is rated as Moderate because it is a local bypass of user interaction...

Wesnoth Information Disclosure Vulnerability (CNVD-2015-04465)

Wesnoth is an open source wargame. An information disclosure vulnerability exists in Wesnoth, which arises from the program failing to adequately filter user-submitted input. An attacker could exploit this vulnerability to gain access to sensitive information stored in arbitrary files...

CVE-2000-0455

CVE-2000-0455: A buffer overflow in the xlockmore xlock program (versions 4.16 and earlier) allows local users to read sensitive data from memory via a long -mode option. Affected component is xlockmore; root cause is a memory safety overrun in handling the -mode argument. Impact documented as pa...