865 matches found
Webshell Bypass Vulnerability in D-Shield Firewall of Shenzhen Di Element Technology Co. Ltd (CNVD-2020-18730)
D-ShieldFirewall is an active defense protection software specially designed for IIS to prevent websites and servers from being invaded by internal and external protection, and is designed based on the concept that the fewer the functions, the safer the server is under the normal operation of all...
CVE-2020-1928
creationtimestamp| type| source ---|---|--- 2020-01-28 08:37:53+00:00| seen| https://t.me/cveNotify/503...
PT-2019-11998 · Puppet · Cd4Pe
Name of the Vulnerable Software and Affected Versions: puppetlabs/cd4pe module versions prior to 1.2.1 Description: The root user’s username and password were exposed in the job’s Job Details pane in the PE console when using the cd4pe::root configuration task to configure a Continuous Delivery f...
CVE-2019-3739
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys...
CVE-2019-5054
creationtimestamp| type| source ---|---|--- 2019-09-13 12:42:43+00:00| seen| https://t.me/informationsecuritychannel/30963...
S-CMS e-commerce system aj***.php page M_fen parameter has SQL injection vulnerability
S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page Mfen parameter SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...
CVE-2019-4424
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force...
CVE-2019-4437
IBM API Connect 2018.1 through 2018.4.1.6 may inadvertently leak sensitive details about internal servers and network via API swagger. IBM X-force ID: 162947...
Unauthorized Access Vulnerability in the Digital Portal System of Tesco Information Technology (Shenzhen) Co.
Ltd. is a high-tech enterprise focusing on the field of education informatization, integrating software product research and development, digital resource development, and education information technology service. An unauthorized access vulnerability exists in the digital portal system of Gainful...
The vulnerability of the KMD module in Intel Graphics Driver allows a hacker to trigger a service failure.
The vulnerability of the KMD module in the Intel Graphics Driver lies due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to cause system failures...
CVE-2018-10948
creationtimestamp| type| source ---|---|--- 2019-05-30 22:29:18+00:00| seen| https://t.me/cibsecurity/4604...
SQL injection vulnerability in Tpshop v3.5 Go***.php page (CNVD-2019-18760)
Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the Tpshop v3.5 Go.php page. Attackers can use the vulnerability to obtain sensitive information in the database...
CVE-2019-12221
creationtimestamp| type| source ---|---|--- 2019-05-20 18:45:35+00:00| seen| https://t.me/cvemitreorg/96...
CVE-2015-1012
creationtimestamp| type| source ---|---|--- 2019-03-25 21:27:32+00:00| seen| https://t.me/cibsecurity/3335...
S-CMS Enterprise Website Builder System Po***.php page suffers from SQL injection vulnerability
S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the Po.php page of the S-CMS enterprise website builder system. Attackers can use the...
SQL Injection Vulnerability in Us***_mo***.asp File of Online Bookkeeping Management System for Environmental Times Enterprises
Eco Times Enterprise Online Bookkeeping Management System is a financial online bookkeeping software. There is a SQL injection vulnerability in the usmo.asp file in the frontend of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can exploit the vulnerability to obtain...
BELL-CVE-2019-6974 CVE-2019-6974 does not affect BellSoft software
Bulletin has no description...
PT-2019-11316 · Jenkins · Jenkins Gitlab Authentication Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins GitHub Authentication Plugin versions 0.29 and earlier Description: An exposure of sensitive information issue exists that allows attackers, who can view a Jenkins administrator's web browser output or control the browser, to retrieve...
CVE-2019-0007
The vMX Series software uses a predictable IP ID Sequence Number. This leaves the system as well as clients connecting through the device susceptible to a family of attacks which rely on the use of predictable IP ID sequence numbers as their base method of attack. This issue was found during...