CVE-2016-1802

CCCrypt in CommonCrypto in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 mishandles return values during key-length calculations, which allows attackers to obtain sensitive information via a crafted app...

WordPress SEO by Yoast Plugin <= 3.2.4 - Sensitive Data Exposure

This plugin is prone to a subscriber settings sensitive data exposure vulnerability. Solution Update the plugin...

EMC RSA Data Loss Prevention Information Disclosure Vulnerability

EMC RSA Data Loss Prevention DLP is a data loss prevention product from EMC Corporation. The product is used to discover and monitor the location and flow of sensitive data such as customer credit card data, employee PII, or company intellectual property and provides features such as user trainin...

SQL Injection Vulnerability in Human Resource Management Platform of Guangzhou Hexie Software Technology Co.

Guangzhou Hexie Software Technology Co., Ltd. is a high-tech enterprise specializing in the research and development of human resource management software. HR software is an informatization tool that can assist in managing the company's human resources. There is a SQL injection vulnerability in t...

F5 BIG-IP and BIG-IQ Information Disclosure Vulnerabilities

F5 BIG-IP LTM, etc. are products of F5 USA.LTM is a local traffic manager; APM is a set of solutions that provide secure and unified access to business-critical applications and networks. An information disclosure vulnerability exists in multiple F5 BIG-IP and BIG-IQ products, which can be...

CVE-2015-8710

The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service out-of-bounds heap memory access and application crash, or possibly have unspecified other impact via an unclosed HTML comment...

Slack: Authentication bypass leads to sensitive data exposure (token+secret)

@secalert discovered an information disclosure on our server which took advantage of an authorization error that allowed the viewing of sensitive information on the server. We mitigated the issue and no longer expose such information, and performed an investigation to verify that no unauthorized...

Siemens APOGEE Insight Information Disclosure Vulnerability

Siemens APOGEE Insight is a building automation control system from Siemens, Germany. A security vulnerability exists in Siemens APOGEE Insight, which originates when the program assigns weak privileges to the application folder. A local attacker could exploit the vulnerability to obtain sensitiv...

CVE-2016-1994

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors...

Flying Fox Link File System SQL Injection Vulnerability

Flying Fox Link File System is a file management system. Flying Fox Link File System suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain database information, resulting in the disclosure of sensitive information...

CVE-2016-0886

EMC Documentum xCP 2.1 before patch 24 and 2.2 before patch 12 allows remote authenticated users to obtain sensitive user-account metadata via a members/xcpmember API call...

USN-2885-1: OpenJDK 6 vulnerabilities

Multiple vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity, and availability. An attacker could exploit these to cause a denial of service, expose sensitive data over the network, or possibly execute arbitrary code. CVE-2016-0483, CVE-2016-0494 A...

CVE-2016-1295

Cisco Adaptive Security Appliance ASA Software 8.4 allows remote attackers to obtain sensitive information via an AnyConnect authentication attempt, aka Bug ID CSCuo65775...

esgps.com XSS vulnerability

Vulnerable URL: http://www.esgps.com/ip/showip.asp?ipname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 12:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

USN-2866-1 firefox vulnerability

Karthikeyan Bhargavan and Gaetan Leurent discovered that NSS incorrectly allowed MD5 to be used for TLS 1.2 connections. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could be exploited to view sensitive information...

Linux kernel local information disclosure vulnerability (CNVD-2016-00090)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A local information disclosure vulnerability exists in Linux kernel. An attacker could exploit this vulnerability to cause a memory leak and obtain sensitive information...

SQL Injection Vulnerability in 'channel' Parameter of Founder Xiangyu Web Content Management System

Founder Xiangyu website content management system is a full-process management platform for website information publishing. A SQL injection vulnerability exists in the Founder Xiangyu Web Content Management System. The lack of filtering of the 'channel' parameter allows an attacker to exploit the...

SQL Injection Vulnerability in 'tplname' Parameter of Founder Xiangyu CMS System

Founder Xiangyu CMS system is a full-process management platform for website information release. A SQL injection vulnerability exists in the Founder Xiangyu CMS system. The lack of filtering of the 'tplname' parameter allows attackers to exploit the vulnerability to obtain sensitive database...

正方教务管理各个版本无条件注入导致敏感信息泄露

简要描述： 正方各个版本无条件注入导致大量学生的敏感信息泄露 详细说明： 漏洞证明： 刚刚忘了把站贴上来了，下面几个只是冰山一角 http://.../fn55wdyilcrlce55nybn5fis/default2.aspx Heron1990@ng http://.../...

PYSEC-2015-11

The getformat function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via a settings key in place of a date/time format setting, as demonstrated by SECRETKEY...