Unauthorized Access Vulnerability in Ali Smart IoT Platform

Alibaba is a global business-to-business B2B e-commerce company and is currently the world's largest online marketplace and business exchange community. An unauthorized access vulnerability exists in the Alibaba Smart IoT platform, which can be exploited by an attacker to gain access to sensitive...

CVE-2013-4088

Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System OTRS 3.0.x before 3.0.21, 3.1.x before 3.1.17, and 3.2.x before 3.2.8 does not properly restrict tickets, which allows remote attackers with a valid agent login to read restricted tickets via a crafted URL involving the ticket spl...

Huawei NIP6800, Secospace USG6600 and USG9500 Invalid Pointer Access Vulnerability

Huawei USG9500 and others are products of Huawei, China.USG9500 is a data center firewall product.NIP6800 is an intrusion prevention system.USG6600 is a data center firewall product. An invalid pointer access vulnerability exists in the Huawei NIP6800, Secospace USG6600, and USG9500, which can be...

CVE-2020-7942

Removed by vendor...

Security Bulletin: File Access Vulnerability Affects IBM Sterling File Gateway (CVE-2018-1398)

Summary IBM Sterling File Gateway could allow a remote attacker to download certain files that could contain sensitive information Vulnerability Details CVEID: CVE-2018-1398 DESCRIPTION: IBM Sterling File Gateway could allow a remote attacker to download certain files that could contain sensitive...

Design/Logic Flaw

An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information...

CVE-2013-2574

The CVE-2013-2574 affects FOSCAM FI8620 IP Cameras, due to improper access restrictions that let remote attackers browse /tmpfs/ and /log/ directories without authentication, potentially exposing configuration and credentials (e.g., plaintext Wi‑Fi config and admin/passwords). Public references d...

The vulnerability of the Central Management Console component of the SAP BusinessObjects Business Intelligence platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Central Management Console component of the SAP BusinessObjects Business Intelligence platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected...

Oracle PeopleSoft Enterprise PeopleTools Unauthorized Access Vulnerability (CNVD-2020-05101)

Oracle PeopleSoft Enterprise PeopleTools provides a comprehensive set of development tools that support the development and runtime of PeopleSoft applications. A security vulnerability exists in the PIA Core Technology component in Oracle PeopleSoft Enterprise PeopleTools 8.56, 8.57. An attacker...

CVE-2020-2586

Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite component: Hierarchy Diagrammers. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise...

Unspecified Vulnerability in Oracle Financial Services Applications Banking Corporate Lending

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation USA. The products include core banking, online banking, and property management.Oracle Banking Corporate Lending enables banks to adopt digital capabilities in credit management, origination,...

CVE-2015-3147

The CVE-2015-3147 issue affects ABRT’s daemon, specifically daemon/abrt-handle-upload.in, where moving reports from /var/spool/abrt-upload can be manipulated via a symbolic link to write to arbitrary files (or cause other impacts) on the system. The vulnerability arises from a symlink attack agai...

Design/Logic Flaw

A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniStack for Cisco, SimpliVity OmniStack for Lenovo and SimpliVity OmniStack for Dell nodes. Two now...

Email Security Weak Default Credential

Weak default password cause vulnerability in SonicWall Email Security appliance which leads to attacker gain access to appliance database. This vulnerability affected Email Security Appliance up to 10.0.2, 9.2.3 and earlier. CVE: CVE-2019-7488 Last updated: Dec. 23, 2019, 8 p.m...

Design/Logic Flaw

An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges...

CVE-2019-19231

CVE-2019-19231 concerns a local privilege-escalation in Broadcom/CA Client Automation Agent for Windows (versions 14.0–14.3). The available documents confirm an insecure file access path as the root cause enabling a local attacker to gain elevated privileges. The details consistently reference th...

CVE-2019-6222

CVE-2019-6222 (WebKit / iOS) concerns a consistency issue where a website could access the microphone without displaying the microphone-use indicator. The Apple advisory notes this was addressed with improved state handling and was fixed in iOS 12.2. The CVE appears in multiple sources (Apple sec...

CVE-2019-17335

The Data access layer component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains multiple vulnerabilities that theoretically allow an attacker access to data cached from a data source, or a portion of a data source, that the attacke...

CVE-2019-19814

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause removedirtysegment slab-out-of-bounds write access because an array is bounded by the number of dirty types 8 but the array index can exceed this...

CVE-2019-19814

In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause removedirtysegment slab-out-of-bounds write access because an array is bounded by the number of dirty types 8 but the array index can exceed this...