1153 matches found
Android apps with millions of downloads exposed to high-severity vulnerabilities
Microsoft uncovered high-severity vulnerabilities in a mobile framework owned by mce Systems and used by multiple large mobile service providers in pre-installed Android System apps that potentially exposed users to remote albeit complex or local attacks. The vulnerabilities, which affected apps...
CVE-2022-29181
A flaw was found in the rubygem-nokogiri package. This flaw allows malicious users to change partial contents or configurations on the system. Additionally, this vulnerability can also cause a limited denial of service in the form of interruptions in resource availability. Mitigation To avoid thi...
Adobe Framemaker Out-of-Bounds Read Vulnerability (CNVD-2022-41739)
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A security vulnerability exists in Adobe Framemaker. The vulnerability originates from a network system or a...
Cross site request forgery (csrf)
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management...
CVE-2022-20735 Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery CSRF attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management...
CVE-2022-25594
Microprogram’s parking lot management system is vulnerable to sensitive information exposure. An unauthorized remote attacker can input specific URLs to acquire partial system configuration information...
Information disclosure
Microprogram’s parking lot management system is vulnerable to sensitive information exposure. An unauthorized remote attacker can input specific URLs to acquire partial system configuration information...
CVE-2022-25594
CVE-2022-25594 concerns Microprogram’s Parking Lot Management System. The vulnerability enables an unauthorized remote attacker to input specific URLs to obtain partial system configuration information, leading to exposure of sensitive data. Documented as a network-accessible issue with low attac...
CVE-2022-25594 Microprogram parking lot management system - Exposure of Sensitive Information to an Unauthorized Actor
Microprogram’s parking lot management system is vulnerable to sensitive information exposure. An unauthorized remote attacker can input specific URLs to acquire partial system configuration information...
CVE-2022-25594: Exposure of Sensitive Information to an Unauthorized Actor
Microprogram’s parking lot management system is vulnerable to sensitive information exposure. An unauthorized remote attacker can input specific URLs to acquire partial system configuration information...
Microprogram Parking Lot Management System security vulnerabilities
Microprogram Parking Lot Management System is a parking lot management system from the Chinese company Microprogram. A security vulnerability exists in Microprogram Parking Lot Management System V2.2.9.0518.11, which allows an unauthorized remote attacker to enter a specific URL to obtain some...
CVE-2022-22410: Undefined Security Weakness
IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service. IBM X-Force ID: 222763...
OTRS Command Injection Vulnerability
OTRS is an application from the German company OTRS. A service management software. OTRS suffers from a command injection vulnerability that stems from a lack of filtering and escaping of specially crafted strings in the system configuration, which can be exploited by an attacker to execute...
CVE-2021-36100
Specially crafted string in OTRS system configuration can allow the execution of any system command...
CVE-2021-36100
Specially crafted string in OTRS system configuration can allow the execution of any system command...
CVE-2021-36100
Specially crafted string in OTRS system configuration can allow the execution of any system command...
CVE-2021-36100
CVE-2021-36100 affects OTRS (Open Source Ticket Request System). A specially crafted string in the system configuration can allow arbitrary command execution. Connected sources confirm this vulnerability in OTRS and document remediation: the fix removes configurable system commands from generic a...
CVE-2021-36100
Specially crafted string in OTRS system configuration can allow the execution of any system command...
