CVE-2021-28815

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

Weseek GROWI 安全漏洞

GROWI is a team collaboration software. An access control error vulnerability exists in WESEEK GROWI 4.2.2 and earlier versions, which can be exploited by a remote, unauthenticated attacker to read a user's personal information and/or internal server information...

UBUNTU-CVE-2020-14581

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: 2D. Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocol...

OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Lightweight HTTP Server. Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with network acce...

The vulnerability of the Sample apps sub-component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, allows an intruder to gain unauthorized access to read, modify, add, or delete data.

The vulnerability of the Sample apps sub-component of the Oracle WebLogic Server application server, a software platform of Oracle Fusion Middleware, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acces...

mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

The vulnerability of the pnp-save.sh service on the TeNIX programmable logic controllers MFC1500 and MFC3000 allows a hacker to read data stored by other users on the device.

The vulnerability of the pnp-save.sh service in the TeNIX operating system for programmable logic controllers MFC1500 and MFC3000 is related to the absence of an authentication process. Exploiting this vulnerability allows a malicious actor to remotely read data stored by other users on the devic...

CVE-2018-12471

A External Entity Reference 'XXE' vulnerability in SUSE Linux SMT allows remote attackers to read data from the server or cause DoS by referencing blocking elements. Affected releases are SUSE Linux SMT: versions prior to 3.0.37...

Oracle FLEXCUBE Private Banking Unauthorized Read Vulnerability

Oracle Financial Services Applications is a set of core banking, online banking and property management financial services software from Oracle Corporation, of which Oracle FLEXCUBE Private Banking is a private banking component. A security vulnerability exists in the Miscellaneous subcomponent o...

DEBIAN-CVE-2013-5653

The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file...

Unspecified Vulnerability in Oracle Solaris Cluster Component (CNVD-2016-09784)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A remote security vulnerability exists in the Installation subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version 11.3. An...

Oracle Siebel CRM Siebel Core - Server Framework component has an unspecified vulnerability (CNVD-2016-05487)

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions, which includes sales management, marketing management, customer service systems, call centers and other modules.Siebel Core - Server Framework is one of the server framework component...

Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Enterprise Manager Base Platform Component (CNVD-2016-05465)

Oracle Enterprise Manager Grid Control is a suite of systems management software from Oracle Corporation. The software provides centralized monitoring, lifecycle management, and other functions for the Oracle IT architecture. enterprise Manager Base Platform is one of the system management platfo...

Oracle Siebel CRM Siebel Core - Server Framework component has an unspecified vulnerability (CNVD-2016-05484)

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions, which includes sales management, marketing management, customer service systems, call centers and other modules.Siebel Core - Server Framework is one of the server framework component...

Oracle Siebel CRM Siebel Core - Server Framework component has an unspecified vulnerability (CNVD-2016-05273)

Oracle Siebel CRM is the United States Oracle Oracle company's set of customer relationship management solutions, which includes sales management, marketing management, customer service systems, call centers and other modules.Siebel Core - Server Framework is one of the server framework component...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2016-05469)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle Corporation, and PeopleSoft Enterprise PeopleTools is one of the tools and technology components that transforms the way organizations manage, use, and maintain their PeopleSoft software. PeopleSoft...

Unspecified Vulnerability in Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools Component (CNVD-2016-02561)

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle.PeopleSoft Enterprise HCM Candidate Gateway is a self-service front-end to the Oracle PeopleSoft Enterprise Recruiting solution component. An unspecified vulnerability exists in the Portal subcomponent of th...

Vulnerability of JRockit and Java Platform software frameworks, which allow attackers to read data or modify data.

The vulnerability of the Security Jrockit and Java Platform subcomponent is related to errors in the code. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain access to read, modify, add, or delete data using network packets...

Oracle Fusion Middleware Oracle GlassFish Server Component Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection, etc. Oracle GlassFish Server is one of the components that can realize t...

Oracle HTTP Server A vulnerability exists in the HTTP Server component.

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides features such as middleware, Oracle HTTP Server, a component based on Apache HTTP Server and used to create web servers. The platform provides...