Vulnerability fixed in Apache Tomcat

Apache has fixed a vulnerability in Tomcat. A unauthenticated remote malicious person could exploit the vulnerability potentially exploit it to gain access to sensitive data. The malicious party would need insight into the workings of the web application to be manipulated and exploitation is not...

CVE-2022-21405

Vulnerability in the OSS Support Tools product of Oracle Support Tools component: Oracle Explorer. The supported version that is affected is 18.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where OSS Support Tools executes to compromise OSS...

The vulnerability of the FortiOS operating system, related to insufficient verification of CN/SAN certificates, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the FortiOS operating system is related to insufficient verification of the authenticity of the CN/SAN certificates. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Web Container component of the Oracle WebLogic Server application server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Container server component of Oracle WebLogic Server is related to deficiencies in path name checking for access to restricted directories. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Node Set-value module, related to type conversion errors, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Node Set-value module is related to type conversion errors. Exploiting this vulnerability allows an attacker who operates remotely to gain access to confidential data, compromise its integrity, and cause service failures...

livehelperchat 安全漏洞

livehelperchat is a live support available for free on the website through Live Helper Chat. A security vulnerability exists in livehelperchat versions prior to 3.96 that stems from a loose comparison leading to IDOR on multiple endpoints. an attacker can bypass multiple checks to access other...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that stems from a lack of permission checking in Device Policy. An attacker could use this vulnerability to obtain sensitive information...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has a security vulnerability that stems from a privilege bypass in the settings provider program, which could be exploited by attackers to gain access to sensitive information...

Vulnerabilities fixed in OTRS

OTRS developers have fixed vulnerabilities in OTRS 7 and 8. An authenticated malicious person can exploit the vulnerabilities exploit them to perform a cross-site scripting XSS attack, execute commands in the context of the application, or to gain access to sensitive data. OTRS has released updat...

IBM Engineering Workflow Management 安全漏洞

IBM Engineering Workflow Management is an engineering lifecycle management solution software for project management from IBM, U.S.A. A security vulnerability exists in IBM Rational Team Concert that allows an authenticated user to access sensitive information. No detailed vulnerability details ar...

The vulnerability of operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS, related to the disclosure of information, allows attackers to gain access to confidential data.

The vulnerabilities of iOS, iPadOS, tvOS, watchOS, and macOS are related to the exposure of information. Exploiting these vulnerabilities can allow attackers to gain access to confidential information...

Microweber 信息泄露漏洞

Microweber is an online store management system from the Microweber community in the United States that provides drag-and-drop functionality. The system includes modules for adding products, images, etc. microweber has an information disclosure vulnerability, which stems from errors in the...

The vulnerability of the k8s module of the Ansible configuration management system, related to the disclosure of information, allows attackers to gain access to confidential data.

The vulnerability of the k8s module in the Ansible configuration management system is related to the exposure of information. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

EVGA Precision XOC 安全漏洞

EVGA Precision XOC is EVGA's This software allows you to fine-tune your NVIDIA graphics card to maximize cooling and performance. A security vulnerability exists in EVGA Precision XOC, which can be exploited by attackers to access sensitive components and data...

The vulnerability of the libjpeg-turbo codec, related to reading beyond the buffer boundary, allows attackers to access confidential information or cause service failures.

The vulnerability of the libjpeg-turbo codec is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential information or cause service failures by creating a specially crafted file...

The vulnerability of the Android EMUI operating system’s shell, related to the bypassing of security features, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Android EMUI operating system’s shell is related to the bypassing of security features. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2021-23193

Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators to retrieve sensitive information from the Command Centre Server. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 MR3 ; 8.40...

vivo Jovi Smart Scene 安全漏洞

Vivo Jovi Smart Scene is used by China's Vivo to provide users with efficient, interactive and decision-making personalized services. The vivo Jovi Smart Scene suffers from a security vulnerability that allows an attacker to access sensitive information stored in the jovi Smart Scene module by...

Microsoft Edge 信息泄露漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge suffers from an information disclosure vulnerability that allows remote attackers to access potentially sensitive information...

The vulnerability of the highly efficient pglogical logical replication system, related to the failure to cleanse input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the highly efficient pglogical logical replication system is related to the failure to perform data cleansing on input data. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...