The vulnerability of the Windows Installer component on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Installer component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information through a specially...

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created document or a...

The vulnerability of Microsoft Exchange Server servers stems from the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of Microsoft Exchange Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created request...

The vulnerability of the “setMethod” function in the Symfony/HTTP-Foundation software for web application development and management lies in the lack of measures to protect SQL query structures. This allows attackers to execute arbitrary code through SQL injection attacks.

The vulnerability of the “setMethod” function in the Symfony software platform for web application development and management is related to the lack of measures to protect SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary code through SQL injection...

Vulnerability of the Server:Replication component of the Oracle MySQL database management system, allowing attackers to gain unauthorized access to confidential data

The vulnerability of the Server:Replication component of the Oracle MySQL database management system is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data...

The vulnerability of Firefox browser, related to the lack of protection for service data, allows attackers to gain access to confidential information.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of Firefox browser, related to the lack of protection for service data, allows attackers to gain access to confidential information.

The vulnerability of Firefox browsers is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the Huawei PC Manager application, related to the lack of protection for service data, allows a perpetrator to disclose the protected information.

The vulnerability of the Huawei PC Manager application relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by the system...

App Used by Israel's Ruling Party Leaked Personal Data of All 6.5 Million Voters

An election campaigning website operated by Likud―the ruling political party of Israeli Prime Minister Benjamin Netanyahu―inadvertently exposed personal information of all 6.5 million eligible Israeli voters on the Internet, just three weeks before the country is going to have a legislative...

The vulnerability of the Security component of the Oracle AutoVue data visualization application, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the Security component of the Oracle AutoVue data visualization application relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through the HTTP...

CVE-2020-6969

It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations...

CVE-2020-6969

It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versions prior to 6.53 and manipulate system configurations...

CVE-2020-5182

The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" or similar attributes such as noreferrer, the tabnabbing may occur. To reproduce the bug,...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to exploit it to disclose protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the sub-component of the Infrastructure component of the Oracle FLEXCUBE Universal Banking banking analytics system, a simulation modeling application of Oracle Financial Services, allows a perpetrator to gain access to read data or modify data.

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking component, a banking analytics system for simulation-based modeling by Oracle Financial Services Applications, is related to the lack of protection for operational data. Exploiting this vulnerability...

The vulnerability in the web protection component of Kaspersky’s antivirus and security products, including Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, and Kaspersky Security Cloud, allows attackers to disclose protected information.

The vulnerability of the web protection component of Kaspersky Anti-Virus, Kaspersky Internet Security, Kaspersky Total Security, Kaspersky Free Anti-Virus, Kaspersky Small Office Security, and Kaspersky Security Cloud lies in the lack of protection for operational data. Exploiting this...

The vulnerability of the Object Migration sub-component of the Oracle Financial Services Analytical Applications Infrastructure component of the banking analytics system’s simulation model Oracle Financial Services Applications allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Object Migration sub-component of the Oracle Financial Services Analytical Applications Infrastructure banking analytics system’s simulation model involves a lack of protection for operational data. Exploiting this vulnerability allows an attacker, operating remotely, to...

CVE-2020-7998

An arbitrary file upload vulnerability has been discovered in the Super File Explorer app 1.0.1 for iOS. The vulnerability is located in the developer path that is accessible and hidden next to the root path. By default, there is no password set for the FTP or Web UI service...

CVE-2020-7998

An arbitrary file upload vulnerability has been discovered in the Super File Explorer app 1.0.1 for iOS. The vulnerability is located in the developer path that is accessible and hidden next to the root path. By default, there is no password set for the FTP or Web UI service...