812 matches found
SUSE-SU-2020:0496-1 Security update for mariadb
This update for mariadb fixes the following issues: MariaDB was updated to version 10.2.31 GA bsc1162388. Security issues fixed: - CVE-2020-2574: Fixed a difficult to exploit vulnerability that allowed an attacker to crash the client bsc1162388. - CVE-2019-18901: Fixed an unsafe path handling...
IBM Security Secret Server Code Execution Vulnerability
IBM Security Secret Server is a set of privileged access management solutions from IBM USA. The product supports password management, privileged account identification and privileged session access monitoring and logging. A code execution vulnerability exists in IBM Security Secret Server 10.7. T...
PCRE Buffer Overflow Vulnerability
PCRE Perl Compatible Regular Expressions is a software developer Philip Hazel developed a use of C language written in open source regular expression library. A buffer overflow vulnerability exists in versions of PCRE prior to 10.34. The vulnerability stems from a networked system or product...
Google Android Framework Information Disclosure Vulnerability (CNVD-2020-07206)
Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the Framework component of Google Android 8.0, 8.1, 9, and 10. No details of the vulnerability are available at this tim...
DEBIAN-CVE-2019-15606
Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons...
CVE-2020-6767
A path traversal vulnerability in the Bosch Video Management System BVMS FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 = 10.0.0.1225, 9.0 = 9.0.0.827, 8.0 = 8.0.329 and 7.5 and older. This affects...
CVE-2019-4638
IBM Security Secret Server 10.7 does not set the secure attribute on authorization tokens or session cookies. This could allow an attacker to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 170044...
CVE-2020-1788
Honor V30 smartphones with versions earlier than 10.0.1.135C00E130R4P1 have an improper authentication vulnerability. Certain applications do not properly validate the identity of another application who would call its interface. An attacker could trick the user into installing a malicious...
CVE-2020-2656
Vulnerability in the Oracle Solaris product of Oracle Systems component: X Window System. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...
SUSE-SU-2020:0104-1 Security update for nodejs10
This update for nodejs10 to version 10.18.0 fixes the following issues: Security issues fixed: - CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field bsc1159352. - Added support for chacha20-poly1305 for Authenticated...
Apple macOS Mojave Application Firewall Component Input Validation Error Vulnerability
Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers.Application Firewall is one of the application firewall components. An input validation error vulnerability exists in the Application Firewall component in Apple macOS Mojave versions prior to 10.14.5. An...
Directory Traversal Vulnerability in Ocean Cms V10 Version
Ocean CMS is designed to solve the core needs of station owners and content management system, a set of programs to adapt to the computer, cell phone, tablet, APP multiple terminal entrances, without any encryption code, safe and secure station-building tools. Ocean cms V10 version of the existen...
Ocean cms V10 version exists arbitrary file deletion vulnerability
Ocean CMS is designed to solve the core needs of station owners and content management system, a set of programs to adapt to the computer, cell phone, tablet, APP multiple terminal entrances, without any encryption code, safe and secure station-building tools. Ocean cms V10 version of the existen...
Electronic Arts Origin Elevation of Privilege Vulnerability
Origin is a digital distribution platform for buying and playing video games from Electronic Arts in the United States. An elevation of privilege vulnerability exists in Electronic Arts Origin 10.5.x and earlier versions, which can be exploited by attackers to elevate privileges...
PT-2019-15950 · Zoho · Zoho Manageengine Eventlog Analyzer
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine EventLog Analyzer versions 10.0 SP1 before Build 12110 Description: An issue was discovered that allows bypassing security restrictions, enabling the recovery of MD5 hashes of accounts used to authenticate the ManageEngine...
Code Execution Vulnerability in Ocean Cms v10 Version
SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS v10 version of the existence of code execution vulnerabilities, attackers can exploit the vulnerability to execute arbitrary code to obtain server privileges...
Google Android Framework elevation of privilege vulnerability (CNVD-2019-44265)
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. A security vulnerability exists in Framework in Google Android version 10. An attacker can exploit the vulnerability to elevate...
Red Hat Infinispan Elevation of Privilege Vulnerability
Red Hat Infinispan is a distributed caching and key-value NoSQL data storage software from Red Hat Red Hat. A security vulnerability exists in versions prior to Red Hat Infinispan 10.0.0 Final. An attacker could exploit the vulnerability to invoke private methods with Infinispan privileges...