Sensitive Data Exposure in loopback

Versions of loopback prior to 3.26.0 3.x and 2.42.0 2.x are vulnerable to Sensitive Data Exposure. Invalid API requests to the login endpoint may return information about the first user in the database. This can be used alongside other attacks for credential theft. Recommendation If you're using...

GHSA-724C-6VRF-99RQ Sensitive Data Exposure in loopback

Versions of loopback prior to 3.26.0 3.x and 2.42.0 2.x are vulnerable to Sensitive Data Exposure. Invalid API requests to the login endpoint may return information about the first user in the database. This can be used alongside other attacks for credential theft. Recommendation If you're using...

IBM Security Guardium Insights Authorization Issues Vulnerability

IBM Security Guardium Insights is a modern hybrid cloud data security hub designed to provide a reliable view of an organization's data security and compliance posture. IBM Security Guardium Insights 2.0.1 suffers from an authorization issue vulnerability that can be exploited by an attacker to...

USN-4475-1 chrony vulnerability

It was discovered that Chrony incorrectly handled certain symbolic links. An attacker could possibly use this issue to cause a denial of service or expose sensitive information...

CVE-2020-13617

The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts...

UCMS has information leakage vulnerability

UCMS is a simple and efficient PHP open source website building system. UCMS suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Security Bulletin: IBM Content Navigator is susceptible to a sensitive data exposure.

Summary IBM Content Navigator has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4687 DESCRIPTION: IBM Content Navigator could allow an authenticated user to view cached content of another user that they should not have access to. CVSS Base score: 4.3 CVSS Temporal...

Logic Flaw Vulnerability in the Manuscript Management Platform of Sancai Journal Acquisition and Editing System

Sancai Journal Acquisition and Editing System is a preferred networked office platform for scientific and technical journals. A logic flaw vulnerability exists in the manuscript management platform of Sancai Journal Acquisition and Editing System, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Xinghua Xinwang Information Consulting Service Department's Website Building System

Xinghua Xinwang Information Consulting Service Department is a professional engaged in, Baidu keyword optimization and enterprise website construction and e-commerce services of the service provider. Xinghua City letter network information consulting services department of the station building...

SQL Injection Vulnerability in Standard PepsiCo***.ashx Page of RunShen Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a high-tech company specializing in software development and information services. Ltd. SQL injection vulnerability exists in the Standard PepsiCo.ashx page, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in ne***.asp page of the website building system of Shenyang Numerical Information Technology Co.

Shenyang Numerical Information Technology Co., Ltd. is a new technology enterprise engaged in Internet information service, e-commerce application and enterprise application system development. Shenyang number industry information technology limited company to build the system ne.asp page there i...

SQL Injection Vulnerability in As***.aspx Page of Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. Ltd. home furnishing ERP management system As.aspx page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database information...

DEBIAN-CVE-2020-17495

django-celery-results through 1.2.1 stores task results in the database. Among the data it stores are the variables passed into the tasks. The variables may contain sensitive cleartext information that does not belong unencrypted in the database...

SQL Injection Vulnerability in Alert Platform of Xiamen SiXin Communication Technology Co. Ltd (CNVD-2020-51471)

Xiamen Sihsin Communication Technology Co., Ltd. is a national high-tech enterprise, Fujian Province Science and Technology Innovation Small Giant leading enterprise, Internet of Things IoT platform enterprise, IoT technology expert, IoT communication equipment and solution provider. Xiamen Sihon...

SQL Injection Vulnerability in Hualei Technology's Integrated Platform for Cross-Border E-Commerce

Hualei Technology is a company that provides customers with a variety of high-quality e-commerce logistics integration services, including orders, warehousing, distribution management and supporting services, system solutions. A SQL injection vulnerability exists in the cross-border e-commerce...

Shanghai Zhihu Information Technology Website Building System suffers from SQL Injection Vulnerability

Shanghai Zhihu Information Technology Co., Ltd. is a high-tech enterprise focusing on software customization and product development. Shanghai Zhihu Information Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information fro...

SQL Injection Vulnerability in Enterprise Standardized Management System of Runshen Information Technology (Shanghai) Co.

Runshen Information Technology Shanghai Co., Ltd. main standard automatic update management software, file digitization, digitization of the map. Ltd. enterprise standardization management system, there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Mingxin Sunshine Procurement Management Platform li***.do Page

Mingxin Sunshine Procurement Management Platform is dedicated to creating e-procurement solutions for enterprises. A SQL injection vulnerability exists in the li.do page of Mingxin Sunshine Procurement Management Platform. An attacker can use this vulnerability to obtain sensitive information fro...

SQL Injection Vulnerability in Instant Messaging Manager

Instant Messaging Manager is a tool that combines communication capabilities. Instant Messaging Manager suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Information leakage vulnerability in Credit China, a new generation public credit information service platform of Liaoning Like Information Engineering Co.

The new generation of public credit information service platform is a credit service platform that provides users with powerful functions and background management capabilities to meet the government's needs in data collection, information sharing, reward and punishment linkage, credit supervisio...