3557 matches found
Samsung Mobile Device Input Validation Error Vulnerability (CNVD-2020-32822)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have an input validation error vulnerability that can be exploited by an attacker to read/write files in a locked state with the help of a...
Totemo totemomail read/write access vulnerability
Totemo totemomail is an email encryption solution from the Swiss company Totemo. A security vulnerability exists in Totemo totemomail version 7.0.0. The vulnerability can be exploited by a remote attacker via enumeration to read and modify mail folders...
CVE-2020-9408
The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker with write permissions to the Spotfire Library, but not "Script Author" group permission, to modif...
CVE-2020-8778
Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 rb65251d6-b368 has XSS via an uploaded document, when the attacker has write access to a project...
CVE-2020-8778
Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 rb65251d6-b368 has XSS via an uploaded document, when the attacker has write access to a project...
CVE-2020-8778
Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 rb65251d6-b368 has XSS via an uploaded document, when the attacker has write access to a project...
CVE-2020-8778: Improper Neutralization of Input During Web Page Generation
Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 rb65251d6-b368 has XSS via an uploaded document, when the attacker has write access to a project...
PT-2020-20270 · Alfresco · Alfresco Community +1
Name of the Vulnerable Software and Affected Versions: Alfresco Enterprise versions prior to 5.2.7 Alfresco Community versions prior to 6.2.0 rb65251d6-b368 Description: The issue allows for cross-site scripting XSS attacks via an uploaded document. This can occur when an attacker has write acces...
PT-2020-1707
Name of the Vulnerable Software and Affected Versions Cisco Smart Software Manager On-Prem affected versions not specified Description A vulnerability in the High Availability service could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged...
CVE-2020-3158: Use of Hard-coded Credentials
A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...
CVE-2020-8010
CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...
CVE-2020-8010: Undefined Security Weakness
CA Unified Infrastructure Management Nimsoft/UIM 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot controller component. A remote attacker can execute commands, read from, or write to the target system...
CVE-2020-8768: Incorrect Permission Assignment for Critical Resource
An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism for read and write access to the configuration of the device. The mechanism can be discovered by examining a link on the website of the device...
CVE-2020-8997
The CVE concerns older generation Abbott FreeStyle Libre sensors. Affected component: the NFC unlock mechanism enables a remote attacker in close proximity to write memory. Root cause centered on an NFC unlock command that grants write access. Impact as described: potential memory modification or...
CVE-2019-19194
The Bluetooth Low Energy Secure Manager Protocol SMP implementation on Telink Semiconductor BLE SDK versions before November 2019 for TLSR8x5x through 3.4.0, TLSR823x through 1.3.0, and TLSR826x through 3.3 devices installs a zero long term key LTK if an out-of-order link-layer encryption request...
Design/Logic Flaw
A vulnerability exists in HCView aka Hardcoreview 1.4 due to a write access violation with a GIF file...
CVE-2012-6306
A vulnerability exists in HCView aka Hardcoreview 1.4 due to a write access violation with a GIF file...
CVE-2012-6306
CVE-2012-6306 affects HCView (aka Hardcoreview) 1.4. The vulnerability is caused by a write access violation triggered by a GIF file. Concrete details specified in connected documents identify the affected product and the root cause as a GIF-processing write violation, but no remediation or explo...
PT-2020-7282
Name of the Vulnerable Software and Affected Versions: HCView aka Hardcoreview version 1.4 Description: A vulnerability exists due to a write access violation with a GIF file. Recommendations: For HCView aka Hardcoreview version 1.4, at the moment, there is no information about a newer version th...