Unauthorized Access Vulnerability in Gallery 27.0, Qixing Image Library (CNVD-2020-00193)

Qixing Image GalleryGallery is mainly used to store images or videos in the company. An unauthorized access vulnerability exists in Qixing Image Library Gallery 27.0, which can be exploited by attackers to obtain sensitive information...

CmsEasy has an override access vulnerability

Ltd. CmsEasy Ease2Easy enterprise website system, also known as Ease2Easy enterprise website program, is Ease2Easy to develop China's first set of free enterprise website templates for marketing enterprise website management system, the system front html, fully SEO-compliant, as well as online...

CVE-2019-13543

CVE-2019-13543 affects Medtronic Valleylab Exchange Client (v3.4 and below) and Valleylab FT10 FX8 energy platforms (VLFT10GEN v4.0.0 and below; VLFX8GEN v1.1.0 and below). The vulnerability is due to multiple sets of hard-coded credentials, which can be leveraged to read files on the device. The...

Cisco Web Security Appliance CVE-2019-15956 Unauthorized Access Vulnerability

Description Cisco Web Security Appliance is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. This issue is being tracked by Cisco Bug ID CSCvp51493. Technologies Affected...

Unauthorized Access Vulnerability in Lingzhan Academic Affairs Management System

Changchun Lingzhan Software Co., Ltd. is a high-tech enterprise specializing in the development and sale of application software for the education industry. An unauthorized access vulnerability exists in the Lingzhan Academic Affairs Management System. An attacker can use the vulnerability to...

Apache CXF Denial of Service and Unauthorized Access Vulnerabilities

Description Apache CXF is prone to a denial-of-service vulnerability and an unauthorized access vulnerability. Attackers can exploit these issues to cause a denial-of-service condition and bypass certain security restrictions and gain unauthorized access; this may aid in launching further attacks...

Dell EMC iDRAC CVE-2019-3764 Unauthorized Access Vulnerability

Description Dell EMC iDRAC is prone to an unauthorized-access vulnerability. Attackers can exploit this issue to gain unauthorized access and perform unauthorized actions. This may aid in further attacks. The following Dell products are affected: Dell EMC iDRAC8 versions prior to 2.70.70.70 are...

Advantech WISE-PaaS/RMM Unauthorized Access Vulnerability

Advantech WISE-PaaS/RMM is a remote monitoring and management platform for IoT devices. An unauthorized access vulnerability exists in Advantech WISE-PaaS/RMM, which can be exploited by an attacker to submit a special request for unauthorized access to a device...

CVE-2019-18363

CVE-2019-18363 affects JetBrains TeamCity prior to version 2019.1.2. The issue allowed an attacker to access the history of builds for a deleted build configuration under certain circumstances, constituting an information-disclosure vulnerability in the TeamCity server. The connected documents co...

CVE-2019-18363

In JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a deleted build configuration under some circumstances...

CVE-2019-4309

IBM Security Guardium Big Data Intelligence SonarG 4.0 uses hard coded credentials which could allow a local user to obtain highly sensitive information. IBM X-Force ID: 161035...

The vulnerability of the PM_V3!CTagInfoThreadBase function in the WebAccess HMI Designer software allows a attacker to cause a service failure.

The vulnerability of the PMV3!CTagInfoThreadBase function GetNICInfo+0x0000000000512918 in the software for developing and managing HMI applications of WebAccess HMI Designer is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities see the Cisco Security Advisories page. The Cybersecurity an...

Unspecified Vulnerability in Oracle Fusion Middleware Business Intelligence Enterprise Edition

Oracle Fusion Middleware Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collections and other features. business Intelligence Enterprise Edition is one of the components for the...

Unspecified Vulnerability in Oracle Fusion Middleware Outside In Technology (CNVD-2019-37235)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle Corporation. The platform provides middleware, software collections, etc. Outside In Technology is one of the software development kit components. An...

Unspecified Vulnerability in Oracle Java SE and Java SE Embedded (CNVD-2019-37221)

Oracle Java SE and Oracle Java SE Embedded are both products of Oracle Corporation.Oracle Java SE is a Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle Java SE Embedded is a Java platform that targets Java...

Design/Logic Flaw

D-Link DIR-846 devices with firmware 100A35 allow remote attackers to execute arbitrary OS commands as root by leveraging admin access and sending a /HNAP1/ request for SetMasterWLanSettings with shell metacharacters to /squashfs-root/www/HNAP1/control/SetMasterWLanSettings.php...

CVE-2019-9530

The CVE-2019-9530 entry applies to Cobham EXPLORER 710 (firmware 1.07). The vulnerability is that the web root directory has no access restrictions, enabling an unauthenticated, local attacker connected to the device to read and download any file in the web root. The provided connected documents ...

CVE-2019-0073

CVE-2019-0073 describes a local vulnerability in Juniper Networks Junos OS where PKI keys exported via the command run request security pki key-pair export may have insecure file permissions. This could allow a local user with shell access to read those keys. Affected releases include Junos OS 15...

IrfanView User Mode Write Access Conflict Vulnerability (CNVD-2019-36928)

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. IrfanView 4.53 suffers from a user-mode write access conflict vulnerability. An attacker can exploit this vulnerability to read...