CVE-2020-35929

In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker for unauthorized access to remote data...

CVE-2020-20950

Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable...

Kaspersky TinyCheck Trust Management Issues Vulnerability

Kaspersky TinyCheck is a software from the Russian company Kaspersky that captures network communications from smartphones or any device that can be associated with a Wi-Fi access point. TinyCheck before commits 9fd360d and ea53de8 suffers from a security vulnerability that stems from an...

IBM Engineering Workflow Management Information Disclosure Vulnerability

IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. An information disclosure vulnerability...

CVE-2020-35388

rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true...

CVE-2020-0494

In ih264dparseave of ih264dsei.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

XStream Code Issue Vulnerability

XStream is a lightweight, easy-to-use, open source Java class library from the XStream team that is primarily used to serialize or deserialize objects into XML JSON. XStream suffers from a code issue vulnerability that stems from a server-side forged request vulnerability can be activated during...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to reading data beyond the buffer in memory. This allows attackers to disclose protected information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to disclose protected informatio...

PT-2020-6961 · Libslirp +9 · Libslirp +9

Name of the Vulnerable Software and Affected Versions: libslirp versions 4.3.1 and earlier Description: The issue is related to a buffer over-read in the slirp.c component of the libslirp TCP-IP emulator. This occurs because the component attempts to read a certain amount of header data, even if ...

The vulnerability of Moxa EDR-G902, Moxa EDR-G903, and Moxa EDR-810 microprogrammed router software lies in the fact that operations are performed outside the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Moxa EDR-G902, Moxa EDR-G903, and Moxa EDR-810 microprogrammed router software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Search Integration Engine component of the Oracle E-Business Suite Secure Enterprise Search software product allows a malicious individual to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the Search Integration Engine component of the Oracle E-Business Suite Secure Enterprise Search product is related to insufficient validation of entered data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to read, modify,...

The vulnerability of the Infrastructure component of the Oracle FLEXCUBE Universal Banking system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Infrastructure component of the Oracle FLEXCUBE Universal Banking system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP...

The vulnerability of the Analytics Web Administration component of the Oracle Business Intelligence Enterprise Edition software allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Analytics Web Administration component of the Oracle Business Intelligence Enterprise Edition relates to insufficient validation of input data. Exploiting this vulnerability may allow an attacker, operating remotely, to modify, add, or delete data using the HTTP protocol...

Vulnerability of the Server component: The Optimizer component of the MySQL Server database management system, which allows attackers to modify, add, or delete data, or to cause service interruptions.

The vulnerability of the MySQL Server component involves insufficient validation of input data. Exploiting this vulnerability allows an attacker to remotely modify, add, or delete data, or cause service failures using the MySQL network protocol...

The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Marketing Administration component of Oracle’s marketing platform relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information or to modify, add, or delete...

The vulnerability of the WebConnect component of the Oracle Hospitality Suite8 software, which allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the WebConnect component of the Oracle Hospitality Suite8 software for managing hotel resources is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information o...

PT-2023-25157 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.9 to 3.9.21 Moodle versions 3.11 to 3.11.14 Moodle versions 4.0 to 4.0.8 Moodle versions 4.1 to 4.1.3 Moodle version 4.2 Description: A limited SQL injection risk was identified on the Mnet SSO access control page. This flaw...

Vulnerability fixed in Red Hat Jboss Enterprise Application Platform

A vulnerability has been fixed in Red Hat Jboss Enterprise Application Platform. The vulnerability allows a remote malicious person to remotely able to manipulate data and thereby cause a Denial-of-Service. Red Hat has released updates to fix the vulnerability in. More information can be found on...

PT-2020-6710 · Samba +5 · Samba +5

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: The issue is related to insufficient input validation in the Samba package, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a...

Vulnerability fixed in IBM WebSphere Application Server

A vulnerability has been fixed in IBM WebSphere Application Server. The vulnerability allows a remote malicious person to gain access to system data. IBM has released updates to fix the vulnerability. More information can be found on the page below: https://www.ibm.com/support/pages/node/6356083...