Information Leakage Vulnerability in VNet Web Management System of Zhonghai Da

Guangzhou Zhonghaida Satellite Navigation Technology Co., Ltd stock code: 300177 is the first and so far the only listed company in the field of domestic surveying, mapping and geographic information technology equipment. An information leakage vulnerability exists in ZHIDA's VNet web management...

Solaris 10 (Intel) - 'dtprintinfo' Local Privilege Escalation (3)

Exploit Title: Solaris 10 1/13 Intel - 'dtprintinfo' Local Privilege Escalation 3 Date: 2021-02-01 Exploit Author: Marco Ivaldi Vendor Homepage: https://www.oracle.com/solaris/solaris10/ Version: Solaris 10 Tested on: Solaris 10 1/13 Intel / raptordtprintcheckdirintel2.c - Solaris/Intel FMT LPE...

openHAB Code Issues Vulnerabilities

A security vulnerability exists in openHAB before versions 2.5.12 and 3.0.1, which can be exploited by an attacker to retrieve internal information from the file system...

CVE-2020-29538

Archer before 6.9 P1 6.9.0.1 contains an improper access control vulnerability in an API. A remote authenticated malicious administrative user can potentially exploit this vulnerability to gather information about the system, and may use this information in subsequent attacks...

Archer Access Control Error Vulnerability

RSA Security Archer is an enterprise IT governance and compliance governance product from RSA Security UK. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. Archer before 6.9 P1 suffers from an Access Control Error...

CVE-2021-1129

A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appliance ESA, Cisco Content Security Management Appliance SMA, and Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to access general system information and...

CVE-2021-1129

A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appliance ESA, Cisco Content Security Management Appliance SMA, and Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to access general system information and...

Multiple Cisco Products Licensing Issues Vulnerabilities

Cisco Content Security Management Appliance SMA and so on are products of the American Cisco Cisco company.Cisco Content Security Management Appliance is a set of content security management appliance.Cisco Email Security Appliance ESA is an email security appliance.Cisco Web Security Appliance W...

CVE-2020-25606

The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input validation, aka XSS...

CVE-2020-25606

The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input validation, aka XSS...

CVE-2020-24693

The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system information due to insufficient output sanitization...

CVE-2020-24693

The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system information due to insufficient output sanitization...

Input validation

The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input validation, aka XSS...

Design/Logic Flaw

The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system information due to insufficient output sanitization...

CVE-2020-25606

The AWV component of Mitel MiCollab before 9.2 could allow an attacker to view system information by sending arbitrary code due to improper input validation, aka XSS...

CVE-2020-25606

The CVE-2020-25606 vulnerability affects Mitel MiCollab’s AWV component prior to version 9.2. It allows an attacker to view system information by sending arbitrary code due to improper input validation (XSS). Affected product: Mitel MiCollab (AWV component). Root cause: input validation weakness ...

Mitel Networks MiCollab 跨站脚本漏洞

Mitel MiCollab is an enterprise collaboration software and tools platform solution. A cross-site scripting vulnerability exists in the AWV component of Mitel MiCollab versions prior to 9.2. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability by...

Mitel MiContact Center Business 信息泄露漏洞

Mitel MiContact Center Business is an all-media contact center platform from Mitel Canada. The platform is used for customer communication, production management and other scenarios. A security vulnerability exists in Mitel MiContact Center Business prior to version 9.3.0.0, which can be exploite...

Systeminformation Operating System Command Injection Vulnerability

systeminformation is an Npm software library that can obtain information about the operating system. A vulnerability in operating system command injection existed in versions prior to systeminformation npm package version 4.31.1, which stemmed from this issue fixed in version 4.31.1, and fixed a...

Unauthorized Access Vulnerability in Kaixin Account Privilege Request Forms

The QSI Employee Account Privilege Request Form is a system for managing account privileges. An unauthorized access vulnerability exists in the Kaixin Account Privilege Request Form, which can be exploited by an attacker to obtain sensitive information about the system...