PT-2021-19754 · Qsan · Qsan Storage Manager

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager affected versions not specified Description: The issue allows remote attackers to obtain system information without permissions due to an observable behavioral discrepancy vulnerability. Recommendations: Contact QSAN and...

QSAN Storage Manager 安全漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. An information disclosure vulnerability exists in QSAN Storage Manager, which stems from not adding effective privilege controls to the Access to System Information feature. The vulnerability can be...

Arbitrary File Read Vulnerability in EG Easy Gateway of Beijing StarNet Ruijie Network Technology Co.

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and so on. An arbitrary file read vulnerability exists in the EG Easy Gateway...

CVE-2021-32712

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 are vulnerable to system information leakage in error handling. Users are recommend to update to version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview...

Design/Logic Flaw

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 are vulnerable to system information leakage in error handling. Users are recommend to update to version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview...

CVE-2021-32712

CVE-2021-32712 affects Shopware (open‑source eCommerce platform). The vulnerability is an information disclosure in error handling for versions prior to 5.6.10 . An attacker could obtain leaked system information due to improper error handling. Mitigation: upgrade to version 5.6.10 (via Auto‑Upda...

Vulnerability fixed in SonicWall SonicOS

A vulnerability has been fixed in SonicOS. The vulnerability allows an unauthenticated malicious party to obtain system information through a malicious http request to obtain system information. SonicWall categorizes this vulnerability according to the CVSSv3 method with a score of 5.3. SonicWall...

Unauthorized Access Vulnerability in Network Video Surveillance System of Tianmai Technology

Tianmai Technology is a national high-tech enterprise focusing on the field of intelligent public transportation. The company's main business is to provide comprehensive solutions for urban bus operation, management and service based on Telematics technology. There is an unauthorized access...

PT-2021-8692 · Red Hat · Redhat-Certification

Name of the Vulnerable Software and Affected Versions: redhat-certification version 7 Description: The issue concerns the /configuration view of redhat-certification, which fails to perform an authorization check. This allows an unauthenticated user to remove a system file, specifically an XML fi...

CVE-2021-28557

Acrobat Reader DC versions versions 2021.001.20150 and earlier, 2020.001.30020 and earlier and 2017.011.30194 and earlier are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to leak sensitive system information in the context of the...

CVE-2021-21388

systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systeminformation prior to 5.6.4. The issue has been fixed with a parameter check on user input. Please upgrade to version = 5.6.4. If you cannot...

Unauthorized Access Vulnerability in Tianqing Web Application Security Gateway Web Page Tampering Prevention System

Tianqing Web Application Security Gateway hereinafter referred to as: Tianqing WAG anti-tampering is an application layer security product developed by Qishen based on Web security protection and application delivery. There is an unauthorized access vulnerability in Tianqing Web Application...

Arbitrary File Download Vulnerability in SeaCMS

SeaCMS Ocean CMS, Ocean Video Management System is a video-on-demand system designed for webmasters with different needs. SeaCMS has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive system information...

Johnson Controls exacqVision Web Service Unauthorized Access Vulnerability

Johnson Controls exacqVision Web Service is a Johnson Controls program that supports the use of a Web browser to view live video, search and playback video. A security vulnerability exists in exacqVision Web Service version 20.12.2.0 and prior versions, which arises from a lack of authentication...

CVE-2021-27656

A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system...

Design/Logic Flaw

A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system...

Johnson Controls exacqVision Web Service 信息泄露漏洞

Johnson Controls exacqVision Web Service is a Johnson Controls program that supports the use of a Web browser to view live video, search and playback video. A security vulnerability exists in exacqVision Web Service version 20.12.2.0 and prior versions, which arises from a lack of authentication...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Config Download

Summary JT3500V is a most advanced LTE-A Pro CAT12 indoor Wi-Fi & VoIP CPE product specially designed to enable quick and easy LTE fixed data service deployment for residential and SOHO customers. It provides high speed LAN, Wi-Fi and VoIP integrated services to end users who need both bandwidth...

KZTech/JatonTec/Neotel JT3500V 4G LTE CPE 2.0.1 Unauthenticated Log Disclosure

Summary JT3500V is a most advanced LTE-A Pro CAT12 indoor Wi-Fi & VoIP CPE product specially designed to enable quick and easy LTE fixed data service deployment for residential and SOHO customers. It provides high speed LAN, Wi-Fi and VoIP integrated services to end users who need both bandwidth...

Chinese hackers using RedXOR backdoor against Linux systems

By Deeba Ahmed RedXOR malware can steal data, gather system information such as the MAC address, username, clock speed, distribution, and kernel version, etc. This is a post from HackRead.com Read the original post: Chinese hackers using RedXOR backdoor against Linux systems...