Wordpress Ultimate Addons for Beaver Builder Authentication Bypass Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. An authentication bypass vulnerability exists in Wordpress Ultimate Addons for Beaver...

IBM Cloud Pak System Cross-Site Request Forgery Vulnerability

IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from IBM USA. The product supports deploying, managing and moving application environments across hybrid clouds. A cross-site request forgery vulnerability exists in IBM Cloud Pak System...

Unspecified vulnerability in Moodle (CNVD-2019-43889)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle that can be exploited by attackers to bypass security restrictions and perform unauthorized...

Input validation

The Tecno Camon iClick Android device with a build fingerprint of TECNO/H633/TECNO-IN6:8.1.0/O11019/A-180409V96:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer versionCode=7, versionName=7.0.8. This app contains an exported service named...

CVE-2019-3420

CVE-2019-3420 affects ZTE ZXHN H108N modems up to firmware version 2.5.0_EG1T5_TED. The vulnerability is described as an information disclosure bug that could allow an attacker to obtain sensitive information and perform unauthorized operations. Related entries across multiple feeds (NVD, Red Hat...

CVE-2019-3426

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations...

CVE-2019-3426

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations...

Input validation

The 9000EV5.0R1B12 version, and all earlier versions of ZTE product ZXUPN-9000E are impacted by the input validation vulnerability. An attacker could exploit this vulnerability for unauthorized operations...

CVE-2019-3426

CVE-2019-3426 affects ZTE ZXUPN-9000E devices (9000EV5.0R1B12 and earlier). The issue is described as an input‑validation vulnerability that could allow an attacker to perform unauthorized operations. The linked records confirm affected product/version but do not provide concrete exploit details,...

Cryptocat has an unspecified vulnerability (CNVD-2019-40499)

Cryptocat is an open source online cryptographic chat application. A security vulnerability exists in Cryptocat versions prior to 2.0.22. An attacker can exploit the vulnerability to perform unauthorized operations...

Security Advisory 2019-11-05-2 - LuCI CSRF vulnerability (CVE-2019-17367)

DESCRIPTION A logic flaw in LuCI's HTTP routing component led to ineffective CSRF token testing for various request endpoints, specifically ones using the arcombine dispatch action. This allows 3rd party web pages running in the same browser session as an active LuCI login session to perform...

Zyxel NBG-418N v2 Modem Cross-Site Request Forgery Vulnerability

The Zyxel NBG-418N is a broadband router. The Zyxel NBG-418N v2 Modem suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to execute arbitrary script code in the context of an affected site to steal cookie-based authentication credentials or perform...

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2019-40094)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A cross-site request forgery vulnerability exists in IBM InfoSphere Information Server, which can be...

Weak Password Vulnerability in NetGuard Network Audit System V3.0 of Beijing NetGuard Nebula Information Technology Co.

Netnifty Network Audit System Operation and Maintenance Security Control Type is one of Netnifty's comprehensive internal control series products. It is a compliance control system that controls and audits user operation and maintenance operations in the business environment. Netnifty Network Aud...

Tianjin Qipeng Technology Development Co., Ltd. website building system backstage existence of universal password login vulnerability

Tianjin Qipeng Technology Development Co., Ltd. is a main website construction web port company. A universal password login vulnerability exists in the website building system of Tianjin Qipeng Technology Development Co. Attackers can use this vulnerability to log in the background, obtain...

Heilongjiang Provincial Government Service Network has a logic flaw vulnerability

Heilongjiang Provincial Government Service Network is the Heilongjiang Provincial Government to improve the economic and social development of Longjiang environment to create a comprehensive service platform covering the municipal government departments of the online examination and approval. A...

Cisco Finesse Input Validation Error Vulnerability

Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. An input validation error vulnerability exists in Cisco Finesse. An attacker could exploit this vulnerability to gain access to the system and perform unauthorized operations...

LibreOffice Input Validation Error Vulnerability

LibreOffice is an open source office software suite from The Document Foundation TDF. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. A security mode bypass vulnerability exists in LibreOffice, which can be exploited by an attacker to...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20157)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU product.The SDX24 is a modem.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU...

Cross-Site Request Forgery Vulnerability in Multiple AudioCodes Products

AudioCodes Mediant 500L-MSBR and so on are products of AudioCodes Israel.AudioCodes Mediant 500L-MSBR is a 500L series all-in-one SOHO/SMB router.AudioCodes Mediant 500-MSBR is a 500 The AudioCodes Mediant 500-MSBR is a 500L series all-in-one SOHO/SMB router. A cross-site request forgery...