103 matches found
CVE-2022-21374
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
Google Android 信息泄露漏洞
Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in Google Android, which can be exploited by attackers to cause local information disclosure without additional execution privileges...
The vulnerability of the Adobe Media Encoder application, related to writing beyond the buffer boundaries into memory, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Adobe Media Encoder application relates to writing beyond the buffer boundaries into memory. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the Price Book component in the Oracle Advanced Pricing application of the Oracle E-Business Suite allows a malicious actor to gain access to modify, add, or delete data, as well as to unauthorizedly access protected information.
The vulnerability of the Price Book component in the Oracle Advanced Pricing application of the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, as well as gain...
Samsung SMR 访问控制错误漏洞
Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in SELinux policy SMR APR-2021 Release 1 prior to APR-2021 Release 1, which stems from an improper SELinux policy, and can be exploited by a local...
Vulnerabilities fixed in LogRhythm SIEM
Vulnerabilities have been fixed in LogRhythm SIEM. The vulnerabilities allow a malicious person to conduct attacks execute attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Circumvention of security measure. Remote code execution Administrator/Root...
Unauthorized Access Vulnerability in EDAS Configuration Center of AliCloud Computing Ltd.
AliCloud Computing Ltd. is a cloud computing and artificial intelligence technology company dedicated to providing secure and reliable computing and data processing capabilities as an online public service to make computing and artificial intelligence a pervasive technology. An unauthorized acces...
The vulnerability of the Enterprise Manager Repository component of the Enterprise Manager Base Platform allows a malicious individual to gain access to modify, add, or delete data, to gain unauthorized access to protected information, or to cause service failures.
The vulnerability of the Enterprise Manager Repository component of the Enterprise Manager Base Platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data, gain unauthorized access to protected...
The vulnerability of the Microsoft Office suite, related to errors in memory object handling, allows an intruder to gain unauthorized access to protected information.
The vulnerability of the Microsoft Office suite is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created file...
Security Bulletin: IBM Content Classification is affected by an Open Source Eclipse Jetty Vulnerabilities
Summary IBM Content Classification has addressed the following vulnerability. Jetty could allow a remote attacker to obtain sensitive information, caused by a timing channel flaw in util/security/Password.java. By observing elapsed times before rejection of incorrect passwords, an attacker could...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The multiple vulnerabilities in the linux-headers-2.6.26-2-powerpc package of the Debian GNU/Linux operating system may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
The Linux-image-2.6.18-6-s390 operating system from Debian GNU/Linux has multiple vulnerabilities that, if exploited, may compromise the accessibility of protected information. These vulnerabilities can be exploited remotely...
Vulnerability of the Java Platform software platform, which allows attackers to gain access to protected information
The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through the use of the Java Web Start application or Java applet...
Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information
Multiple vulnerabilities exist in the lm-sensors-2.4.27-3-k7-smp package for the Debian GNU/Linux operating system. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...
The vulnerability of the Red Hat Enterprise Linux operating system, which allows a remote attacker to compromise the accessibility of protected information
The vulnerability of the spice-server-0.12.0 package for the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
Oracle 9i HTTP Server soapConfig.xml Access Information Disclosure - Ver2 (CVE-2002-0568)
An information disclosure vulnerability has been reported in Oracle 9i Application Server. A remote attacker could trigger this vulnerability by requesting XSQLConfig.xml or soapConfig.xml through a virtual directory. Successful exploitation of this vulnerability would allow a remote attacker to...
CVE-2012-3493
The commandgiverequestad function in condorstartd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condorstartd port, which leaks the ClaimId...
IBM Access information leak
Critical data is stored in shared memory segment, open for reading and writing...
ZixForum ZixForum.mdb DIrect Request Database Disclosure
The remote server is running ZixForum, a set of ASP scripts for a web-based forum. This program uses a database named 'ZixForum.mdb' that can be downloaded by any client. This database contains discussions, account information, etc. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...