IBM Spectrum Scale Unauthorized Operation Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2020-31093)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A cross-site request forgery vulnerability exists in IBM InfoSphere Information Server. An attacker could...

MayiCMS has a flawed logic vulnerability

MayiCMS is a php mysql based website builder. MayiCMS suffers from a logic flaw vulnerability that can be exploited by attackers to perform unauthorized operations...

Unspecified Vulnerability in IBM Maximo Asset Management

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from IBM USA. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for these assets. A security...

IBM QRadar SIEM Access Control Error Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An access control...

IBM QRadar SIEM Input Validation Error Vulnerability

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An input validatio...

IBM Security Information Queue Unauthorized Operation Vulnerability

IBM Security Information Queue is a data integration product from IBM USA. The product utilizes Kafka technology and a publish-subscribe model to integrate data between IBM security products. A security vulnerability exists in IBM Security Information Queue ISIQ that stems from a program's failur...

CVE-2020-9066

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169C00E166R4P1 have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit...

CVE-2020-9066

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169C00E166R4P1 have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit...

Authentication flaw

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169C00E166R4P1 have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit...

CVE-2020-9066

Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169C00E166R4P1 have an improper authentication vulnerability. The Application doesn't perform proper authentication when user performs certain operations. An attacker can trick user into installing a malicious plug-in to exploit...

Weak Password Vulnerability in Riptide's Internet of Things Platform

Ltd. is a company mainly engaged in information system integration services, Internet virtual private network services, Internet management services and other projects. A weak password vulnerability exists in Ruijie's Internet of Things platform, which can be exploited by attackers to log into th...

Unauthorized Access Vulnerability in FireWool Endpoint Security Management System

The FireWool Endpoint Security Management System is an enterprise version of computer security protection software. The FireFlush Endpoint Security Management System has an unauthorized access vulnerability that can be exploited by attackers to perform unauthorized operations...

CVE-2020-1812

HUAWEI P30 smartphones with versions earlier than 10.0.0.173C00E73R1P11 have an improper authentication vulnerability. Due to improperly validation of certain application, an attacker should trick the user into installing a malicious application to exploit this vulnerability. Successful exploit...

Authentication flaw

HUAWEI P30 smartphones with versions earlier than 10.0.0.173C00E73R1P11 have an improper authentication vulnerability. Due to improperly validation of certain application, an attacker should trick the user into installing a malicious application to exploit this vulnerability. Successful exploit...

CVE-2020-1812

HUAWEI P30 smartphones with versions earlier than 10.0.0.173C00E73R1P11 have an improper authentication vulnerability. Due to improperly validation of certain application, an attacker should trick the user into installing a malicious application to exploit this vulnerability. Successful exploit...

Huawei Honor V30 License Issue Vulnerability

Huawei Honor V30 is a smartphone. An authorization issue vulnerability exists in previous versions of Huawei Honor V30 10.0.1.135 C00E130R4P1, which arises from an application in the system failing to perform proper identity checks on another application calling its interface, and can be exploite...

Logic Flaw Vulnerability in SiteServerCMS

SiteServerCMS is a content management system developed by Beijing Baiyong Qianwei Software Technology Development Co. A logic flaw exists in SiteServerCMS. An attacker can exploit the vulnerability to perform unauthorized operations...

Freelancy Remote Code Execution Vulnerability

Freelancy is a time tracking application for recording time spent on tasks that require billing clients by the hour. Freelancy suffers from a remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code remotely, perform unauthorized operations, cause a denia...

Pandora FMS Remote Code Execution Vulnerability

PandoraFMS is an open source application , used to monitor a variety of Web site activities , it can receive real-time monitoring reports , and sent to your designated mailbox , you can also send via e-mail , SMS . Pandora FMS suffers from a remote code execution vulnerability that can be exploit...