14045 matches found
Design/Logic Flaw
Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion component: Smart View Provider. The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows low privileged attacker with access to the physical communication segment attached to t...
CVE-2020-14768
CVE-2020-14768 affects Oracle Hyperion Analytic Provider Services Smart View Provider (v11.1.2.4). The vulnerability allows a low-privileged attacker with access to the hardware/physical network segment to compromise the service, with user interaction required. Consequences include unauthorized u...
TopscoinAdvanced Digital Error Vulnerability
TopscoinAdvanced is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in the smart contract implementation of TopscoinAdvanced. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Unauthorized Access Vulnerability in YN Smart Campus of Chengdu Enable Technology Co.
Chengdu Enable Technology Co., Ltd. is a high-tech enterprise and software enterprise in education informatization industry. Chengdu Enable Technology Co., Ltd YN Smart Campus has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...
smart-it.co.id Improper Access Control vulnerability OBB-1429337
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Super Cool Awesome Money Number Error Vulnerability
Super Cool Awesome Money SCAM is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in SCAM's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
Unauthorized Access Vulnerability in Yuexun Smart Education Cloud Platform
Yuexun Smart Education Platform is an educational software. An unauthorized access vulnerability exists in Yuexun Intelligent Education Cloud Platform. An attacker can exploit the vulnerability to log in unauthorized and perform unauthorized operations...
C3 Token Number Error Vulnerability
C3 Token C3 is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in C3's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
smart-booking.at Cross Site Scripting vulnerability OBB-1424713
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
smart.materialsconferences.com Cross Site Scripting vulnerability OBB-1423567
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Information Disclosure Vulnerability in Multiple Huawei Products (CNVD-2020-68354)
The Huawei P30 Pro, among others, is a smartphone from the Chinese company Huawei Huawei. A number of Huawei products suffer from an information disclosure vulnerability that stems from the failure to adequately verify the identity of a smart wearable device in a particular scenario, where an...
smart-lift.gr Cross Site Scripting vulnerability OBB-1401981
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Unauthorized Access Vulnerability in smart-web2
smart-web2 is a relatively simple OA system. An unauthorized access vulnerability exists in smart-web2, which can be exploited by an attacker to obtain sensitive information...
Cyber Security Awareness: A Critical Checklist
October 2020 marks the 17th year of National CyberSecurity Awareness Month, where users and organizations are encouraged to double their efforts to be aware of cybersecurity issues in all their digital dealings—and to take concrete steps to increase their privacy and security as necessary. The...
How Google's Android Keyboard Keeps ‘Smart Replies’ Private
The latest Gboard feature needs to know as much as possible about your digital life to work—but doesn't share that data with Google...
CVE-2020-26572
The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcosdecipher. Mitigation This flaw can be mitigated in cases where you can use opensc without the TCOS driver enabled. In such cases, the vulnerable driver can be disabled by specifying them in...
CVE-2020-26570
The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in scoberthurreadfile. Mitigation This flaw can be mitigated in cases where you can use opensc without the Oberthur driver enabled. In such cases, the vulnerable driver can be disabled by specifyi...
CVE-2020-26571
The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in scpkcs15emugemsafeGPKinit. Mitigation This flaw can be mitigated in cases where you can use opensc without the gemsafeGPK driver enabled. In such cases, the vulnerable driver can be disable...
Offering Users More For Their Activity - Similar Items Upon Checkout
The shopping isn't finished once you've purchased your item. If you've ever done shopping online, then you know all about being presented with related items to the one you just purchased. This feature is common for online retail websites and quite useful for both the consumer and the producers. I...
smart-lift.gr Cross Site Scripting vulnerability OBB-1385812
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...