Google Android System Information Disclosure Vulnerability (CNVD-2019-10468)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. System in Google Android suffers from an information disclosure vulnerability that can be exploited by attackers to disclose information...

S-CMS Enterprise Website Builder System se***.php page suffers from SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the se.php page of the S-CMS enterprise website builder system. An attacker can use the...

Denial of Service Vulnerability in Telecommunications Science and Technology First Research Institute In-Vehicle Surveillance System

The First Institute of Telecommunications Science and Technology hereinafter referred to as "Telecom One" is a national professional research institute in the field of communications in China, and is now one of the core enterprises of the Institute of Telecommunications Science and Technology ITS...

GHSA-P9PM-55VP-2JQW Downloads Resources over HTTP in soci

Affected versions of soci insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the system...

Eclipse OpenJ9 Input Validation Error Vulnerability

clipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. An input validation error vulnerability exists in Eclipse OpenJ9 version 0.11.0, which arises from a networked system or product that does not properly validate input...

CVE-2019-7249

CVE-2019-7249 affects Keybase on macOS prior to version 2.12.6. The vulnerability arises in the move RPC to the Helper, described as a time-to-check-time-to-use issue that could allow a user without root to tamper with another user's installations. NVD metrics indicate a high/critical impact (CVS...

Unspecified Vulnerability in Oracle Hospitality Cruise Shipboard Property Management System (CNVD-2019-38551)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation. The solution provides human resource cost management, tracking and management of services throughout a customer's journey to improve customer...

CVE-2019-2409

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: SPMS Suite. The supported version that is affected is 8.0.8. Easily exploitable vulnerability allows low privileged attacker with logon to the...

Information Disclosure

X.Org X11 server is vulnerable to information disclosure. A local user who is plugged into a new device but has switched to a different session will be able to obtain confidential information such as reading passwords from a tty. This allows physically proximate attackers to retrieve sensitive...

Google Android System Component Information Disclosure Vulnerability (CNVD-2019-05113)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the System component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. An attacker can exploit the vulnerability to...

Weblogic Deserialization, Override Access Vulnerability in Zhejiang Insurance Expense Reimbursement System

CR Nebula is an innovative technology company that pioneered the use of mobile internet technology and experience to "elevate" enterprise-level financial management. A weblogic deserialization, override access vulnerability exists in the Zhejiang Insurance Expense Reimbursement System, which can ...

Command injection

System command injection vulnerability in wifiaccess in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the "timeout" URL parameter...

Command injection

System command injection in User.create method in Buffalo TS5600D1206 version 3.61-0.10 allows attackers to execute system commands via the "name" parameter...

Information Disclosure

hawtio-system is vulnerable to an information disclosure. The library displays the entire stack trace when it runs into an exception in accessing a non-existent directory, allowing a malicious user to gather sensitive information from it...

Unauthorized Access Vulnerability in YCCMS v3.3 System

YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. YCCMS v3.3 system has an unauthorized access vulnerability, which can be exploited by attackers to directly access the background without logging in and perform any operation ...

Arbitrary File Download Vulnerability in HDWiki System Backend Database

Interactive Wiki open source system HDwiki is by the interactive online Beijing Technology Co., Ltd. launched a free wiki Wiki building system. HDWiki system background database there are arbitrary file download vulnerability. Attackers can exploit the vulnerability to download the core...

CVE-2018-12153

Intel Graphics Driver (Unified Shader Compiler) in Windows contains CVE-2018-12152, CVE-2018-12153, and CVE-2018-12154 affecting 4th/5th Gen Intel HD Graphics. LEN-24426/PS500197 state input sanitization issues may allow elevation of privilege or denial of service via crafted shaders; mitigation ...

CVE-2018-1649

IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 144655...

UBUNTU-CVE-2018-16586

In Open Ticket Request System OTRS 4.0.x before 4.0.32, 5.0.x before 5.0.30, and 6.0.x before 6.0.11, an attacker could send a malicious email to an OTRS system. If a logged in user opens it, the email could cause the browser to load external image or CSS resources...

Google Android System Elevation of Privilege Vulnerability (CNVD-2019-03707)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System is a component. An elevation of privilege vulnerability exists in System in Android versions 8.0 and 8.1. An attacker can exploit this vulnerability to elevate...