Vulnerabilities fixed in Oracle kernel

Vulnerabilities have been fixed in Oracle kernel. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS. Access to sensitive data Access to system data -= Oracle =- Oracle has made updates available for Oracle Linux ...

Information Leakage Vulnerability in Aicloud Education Cloud Platform of Tianwen Digital Media Technology (Beijing) Co.

AiCloud education cloud platform is a system that meets the needs of education informatization 2.0 era construction in the mode of "platform+application+resources+services", and is constructed in five aspects, namely, intelligent management, intelligent teaching, intelligent teaching and research...

Vulnerabilities fixed in Gitlab

Vulnerabilities have been fixed in GitLab. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of data Circumvention of authentication Circumvention of security measure Remote...

Vulnerabilities fixed in Samsung Mobile

Samsung has fixed several vulnerabilities in its Android distribution. The vulnerabilities allow a malicious potentially able to carry out attacks leading to the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data Access to system data...

Privilege escalation

ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse...

CVE-2020-24030

CVE-2020-24030 affects ForLogic Qualiex v1 and v3, where weak token expiration allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. Across connected sources, the issue is tied to token handling rather than a traditional flaw in application logic. The Re...

CVE-2020-24030

ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable in the current implementation. Tokens are properly expire...

CVE-2020-24030: Operation on a Resource after Expiration or Release

ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable in the current implementation. Tokens are properly expire...

CVE-2020-16206

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16206

CVE-2020-16206 affects Red Lion N-Tron 702-W and 702M12-W (all versions). It is a stored cross-site scripting vulnerability (CWE-79) caused by improper neutralization of input during web page generation, allowing an attacker to remotely execute arbitrary code and access sensitive data. Several so...

CVE-2020-16206

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W all versions...

USN-4479-1 python-django vulnerabilities

It was discovered that Django, when used with Python 3.7 or higher, incorrectly handled directory permissions. A local attacker could possibly use this issue to obtain sensitive information, or escalate permissions...

SQL Injection Vulnerability in cms Website Building System of Kaiping Lianke Network Technology Co.

Kaiping Lianke Network Technology Co., Ltd. is a company that mainly specializes in website construction, website promotion, speed software, sanitary ware ERP management software, and micro letter marketing. Kaiping City, Lianke Network Technology Co., Ltd. building system there are SQL injection...

The vulnerability of the WordPress website content management system, related to the redirection of URLs to an unreliable website, allows attackers to access sensitive data and compromise its integrity.

The vulnerability of the WordPress website content management system is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integrity...

Vulnerabilities fixed in Red Hat JBoss Enterprise Application Platform

Vulnerabilities have been fixed in Red Hat JBoss Enterprise Application Platform. The vulnerabilities allow a malicious person to able to perform attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of data Bypassing authenticatio...

Vulnerabilities fixed in Apache HTTP server

Vulnerabilities have been fixed in Apache. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to sensitive data -= Ubuntu =- Canonical has...

CVE-2020-10779

Red Hat CloudForms 4.7 and 5 leads to insecure direct object references IDOR and functional level access control bypass due to missing privilege check. Therefore, if an attacker knows the right criteria, it is possible to access some sensitive data within the CloudForms...

CVE-2020-10779: Authorization Bypass Through User-Controlled Key

Red Hat CloudForms 4.7 and 5 leads to insecure direct object references IDOR and functional level access control bypass due to missing privilege check. Therefore, if an attacker knows the right criteria, it is possible to access some sensitive data within the CloudForms...

SQL Injection Vulnerability in Beijing Zhongcheng Kexin Integrated Management Platform

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a service provider of the whole tourism industry chain with a high market share in China. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin, which can be exploited by attackers to...

SQL Injection Vulnerability in Website Building System of Shenzhen Shenzhou Tongda Network Technology Co.

Shenzhen Shenzhou Tongda Network Technology Co., Ltd, provides Tencent enterprise mailbox, high-end website construction PC website, cell phone website, WeChat public account, SEO optimization and promotion, enterprise WeChat and other network infrastructure services and network marketing and...