Samsung SMR 安全漏洞

Samsung Mobile MobileWips is an application from Samsung Mobile, a South Korean company. It provides an application that comes with Samsung cell phones. A security vulnerability exists in SMR Feb-2021 Release 1 that allows unauthorized operations, including denial-of-service attacks, by hijacking...

Logic Flaw Vulnerability in ZZCMS (CNVD-2021-14555)

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS has a logic flaw vulnerability , attackers can use the vulnerability to obtain sensitive information , t...

CVE-2020-14275

The CVE-2020-14275 entry concerns HCL Commerce, affecting versions 9.0.0.5–9.0.0.13, 9.0.1.0–9.0.1.14, and 9.1–9.1.4. It states potential denial of service, disclosure of user personal data, and the ability to perform unauthorized administrative operations. No root-cause, affected component/file,...

GaussDB Kernel: Controlling the Permission to Execute the SECURITY INVOKER Function

The SECURITY INVOKER function is executed with the permissions of the invoker. Before invoking a function not created by yourself, check the function content to prevent the function creator from performing unauthorized operations with your Permissions. Copyright C 2020 Greenbone Networks GmbH Som...

Unauthorized Access Vulnerability in Flying Fish Star Enterprise Intelligent Internet Behavior Management System

Chengdu Flying Fish Star Technology Co., Ltd. is a company dedicated to providing intelligent and easy-to-use network communication products and services, continuously improving the quality of network usage through innovative technologies, and cooperating with users to create an intelligent and...

Unauthorized Access Vulnerability in Yuexun Smart Education Cloud Platform

Yuexun Smart Education Platform is an educational software. An unauthorized access vulnerability exists in Yuexun Intelligent Education Cloud Platform. An attacker can exploit the vulnerability to log in unauthorized and perform unauthorized operations...

CVE-2020-10746

A flaw was found in Infinispan org.infinispan:infinispan-server-runtime version 10, where it permits local access to controls via both REST and HotRod APIs. This flaw allows a user authenticated to the local machine to perform all operations on the caches, including the creation, update, deletion...

Mozilla Rust Resource Management Error Vulnerability (CNVD-2021-30575)

Rust is a general-purpose, compiled programming language. A resource management error vulnerability exists in Mozilla Rust version 0.6.2, which stems from a memory safety issue that occurs with insert in the Chunk implementation and can be exploited by an attacker to perform unauthorized operatio...

CVE-2020-13946

In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and...

IBM Event Streams Authorization Issues Vulnerability

IBM Event Streams is a set of event streaming platform based on Apache Kafka project from IBM, USA. The platform is mainly used for Apache Kafka deployment, authentication and encrypted communication and other functions. An authorization issue vulnerability exists in the schema registry in IBM...

CVE-2020-5773

Improper Access Control in Teltonika firmware TRB2R00.02.04.01 allows a low privileged user to perform unauthorized write operations...

Improper access control

Improper Access Control in Teltonika firmware TRB2R00.02.04.01 allows a low privileged user to perform unauthorized write operations...

CVE-2020-5773

Improper Access Control in Teltonika firmware TRB2R00.02.04.01 allows a low privileged user to perform unauthorized write operations...

Authorization Bypass

openjdk is vulnerable to authorizatino bypass. XML validation manipulation due to incomplete application of the use-grammar-pool-only feature allows an attacker to perform unauthorized update, insert and delete operations...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-41491)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.8.0. The vulnerability can be exploited by an attacker to perform unauthorized operations when Town Square is set to read-onl...

CVE-2020-1813

HUAWEI P30 smart phone with versions earlier than 10.1.0.135C00E135R2P11 have an improper authentication vulnerability. Due to improper authentication of specific interface, in specific scenario attackers could access specific interface without authentication. Successful exploit could allow the...

CVE-2020-1813

HUAWEI P30 smart phone with versions earlier than 10.1.0.135C00E135R2P11 have an improper authentication vulnerability. Due to improper authentication of specific interface, in specific scenario attackers could access specific interface without authentication. Successful exploit could allow the...

CVE-2020-1813

HUAWEI P30 smart phone with versions earlier than 10.1.0.135C00E135R2P11 have an improper authentication vulnerability. Due to improper authentication of specific interface, in specific scenario attackers could access specific interface without authentication. Successful exploit could allow the...

Unauthorized Access Vulnerability in Books-Management-System

Books-Management-System is a book management system. An unauthorized access vulnerability exists in Books-Management-System, which can be exploited by an attacker to perform unauthorized operations...

IBM Spectrum Scale Unauthorized Operation Vulnerability (CNVD-2020-34638)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...