Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17435

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17434

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

CVE-2020-17433

Foxit Studio Photo vulnerable in CMP file parsing leading to an out-of-bounds read in Foxit Studio Photo 3.6.6.922 (and affected earlier versions per CNVD). The flaw arises from insufficient validation of user-supplied data, allowing an attacker to read past the end of an allocated structure and ...

The vulnerability of the Advanced Networking Option component of the Oracle Database Server system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Advanced Networking Option component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of protected...

RainbowFish PacsOne Server 代码问题漏洞

RainbowFish PacsOne Server is an image archiving and communication system server from RainbowFish, which is used to save incoming images. The system is used to save incoming images, and a file reading vulnerability exists in Rainbowfish PacsOne Server that could be exploited by an attacker to cau...

The vulnerability in Oracle iPlanet’s web server, related to the read-only access to encryption keys without authentication, allows attackers to disclose protected information.

The vulnerability of Oracle iPlanet web server relates to the read-only access to encryption keys without authentication. Exploiting this vulnerability could allow a malicious actor to disclose the protected information remotely...

Google Android 访问控制错误漏洞

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Framework component of Google Android 10. An attacker can exploit the vulnerability to cause remote informatio...

CVE-2020-27859

This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEuaLogDownloadAction class. The issue results from the lack of...

PT-2021-10560

Name of the Vulnerable Software and Affected Versions: STM32 cryptographic firmware library software expansion for STM32Cube UM1924 affected versions not specified Description: The issue concerns Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA, which can be exploited using Bleichenbacher's...

CVE-2020-4881

IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force...

CVE-2021-3113

Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session/list/allActiveSession request. For example, the attacker can discover the admin's cookie if the admin account happens to be logged in when the allActiveSession request occurs, a...

CVE-2020-7202

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 4 iLO 4 firmware. The vulnerability could be remotely exploited to disclose the serial number and other information...

CVE-2020-7202

CVE-2020-7202 affects HP Integrated Lights-Out 4/5 (iLO 4/5) firmware. The connected Nessus plugin and Red Hat/NVD notes describe a remote information-disclosure vulnerability that could disclose the device serial number and other data. The available documents do not provide technical root-cause ...

CVE-2020-35391

Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must b...

The vulnerability of Microsoft Office, Microsoft Outlook, and Microsoft 365 Apps packages lies in coding errors, which allow attackers to exploit them to disclose protected information.

The vulnerabilities of Microsoft Office, Microsoft Outlook, and Microsoft 365 apps are related to code errors. Exploiting these vulnerabilities can allow attackers to disclose sensitive information remotely...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation software lies in code errors that allow attackers to disclose protected information.

The vulnerability of software packages in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation is related to code errors. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Information Disclosure

flac is vulnerable to information disclosure, An out-of-bounds read due to a heap-based buffer overflow in FLACbitreaderreadricesignedblock in bitreader.c leads to remote information disclosure...

CVE-2020-27055

In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, there is a possible insecure WiFi configuration due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. Use...

CVE-2020-0498

In decodepackedentrynumber of codebook.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android...