GHSA-RXMR-C9JM-7MM8 Exposure of Sensitive Information to an Unauthorized Actor in Apache hive

In Apache Hive 0.6.0 to 2.3.2, malicious user might use any xpath UDFs xpath/xpathstring/xpathboolean/xpathnumber/xpathdouble/xpathfloat/xpathlong/xpathint/xpathshort to expose the content of a file on the machine running HiveServer2 owned by HiveServer2 user usually hive if...

SQL Injection Vulnerability in DaCong Network Technology Company's Website Building System

DaCong Network Technology Inc. is an Internet technology service company. A SQL injection vulnerability exists in the website building system of DaCong Network Technology Company. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Shenzhen Zhongwang Internet Technology Development Co.

Ltd. is a one-stop Internet service provider that focuses on web application development and visual design, supplemented by online interactive brand marketing. There is a SQL injection vulnerability in the website building system of Shenzhen Zhongwang Internet Technology Development Co. Attackers...

Microsoft Outlook Information Disclosure Vulnerability (CNVD-2018-23750)

Microsoft Outlook is an e-mail client software bundled with the Office suite from Microsoft USA. The software manages e-mail, contacts, calendars, and more. An information disclosure vulnerability exists in Microsoft Outlook, which arises from the program failing to comply with the 'Default Link...

SQL Injection Vulnerability in OURPHP 1.8.3

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. OURPHP1.8.3 version of the SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

Sensitive Data Exposure

Overview Versions of pem before 1.13.2 expose sensitive data when the readPkcs12 is used. The readPkcs12 function reads the certificate and key data from a pkcs12 file using the encryption password. As part of this process it creates a globally readable file with a filename of 20 random 0-f...

CVE-2018-1878

IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that could aid in future attacks against the system. IBM X-Force ID: 151714...

Brava! Enterprise / Server 16.4 Information Disclosure

Vulnerable Application: Brava! Enterprise and Brava! Server Components Affected Versions: Brava! Enterprise and Brava! Server Components have this as the default configuration, from Brava! 7.5 to the latest Brava! 16.4 on Windows. Not Affected Versions: Linux installs do not automatically create...

Gxlcms News System Ne***.php has SQL Injection Vulnerability

Gxlcms News System is a news cms content management system developed in php+mysql. Gxlcms News System Ne.php suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

System Management Module Vulnerabilities - US

Lenovo Security Advisory: LEN-24374 Potential Impact: Privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9083, CVE-2018-9084, CVE-2018-16089, CVE-2018-16090, CVE-2018-16091, CVE-2018-16092, CVE-2018-16094, CVE-2018-16095, CVE-2018-16096 Summary...

SQL injection vulnerability in ShopsN open source online store full web system (CNVD-2018-22114)

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN open source online store system has a...

SQL injection vulnerability in ShopsN open source online store full web system (CNVD-2018-22115)

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN open source online store system has a...

SQL Injection Vulnerability in the Management System of Official Vehicles of Organizations

Tianjin Guozhiheng Beidou Science and Technology Co., Ltd. is a computer field technology company, the company can provide the overall solution and implementation program of location information big data based on Beidou technology. There is a SQL injection vulnerability in the management system o...

S-CMS Hospital Website Builder System has SQL Injection Vulnerability in Frontend

S-CMS hospital station building system is developed by asp+access/mssql, easy to operate, convenient, support PC+mobile+WeChat. There is a SQL injection vulnerability in the frontend of S-CMS Hospital Building System. An attacker can exploit the vulnerability to obtain sensitive information from...

SQL Injection Vulnerability in LFCMS v3.8.6

LFCMS is a film and television content management system developed in PHP and based on THINKPHP framework suitable for all kinds of video, film and television websites. LFCMS v3.8.6 exists SQL injection vulnerability, the vulnerability stems from the failure to filter pid parameters, attackers ca...

IBM Security Guardium Information Disclosure Vulnerability (CNVD-2019-00994)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes features such as custom UI, report management and streamlined audit process building. A security vulnerability exists in EcoSystem in IBM Security Guardium...

Google PDFium Out-of-bounds read (CVE-2018-16076)

An out-of-bounds and vulnerability exists in Google PDFium. The vulnerability is due to an error in parsing a malformed JBIG2 image stream in a PDF document. Successful exploitation could result in sensitive data exposure and memory corruption...

Information Leakage Vulnerability in Smooth Website Group CMS System

Smooth Web Group CMS System is a management system developed by Liaoning Smooth Data Communication Co., Ltd. which is mainly applied to the construction of Liaoning education campus informatization management platform, healthcare informatization management system, enterprise resource management...

CVE-2018-1800

IBM Sterling B2B Integrator Standard Edition 5.2.6.0 and 6.2.6.1 could allow a local user to obtain highly sensitive information during a short time period when installation is occurring. IBM X-Force ID: 149607...

SQL Injection Vulnerability in Website Building System of Guangzhou JOYCE Computer Technology Co.

Guangzhou Zhuojie Computer Technology Co., Ltd. is a focus for large and medium-sized enterprises, government agencies, institutions, website construction, space, domain names, development of software management systems and other services. There is a SQL injection vulnerability in the website...