ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1 <=1.2.8), ai.chronon:aggregator_2.12 (>=0.0.25 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +807 more potentially affected by CVE-2020-9492 via org.apache.hadoop:hadoop-common (>=3.2.0 <=3.2.1)

org.apache.hadoop:hadoop-common MAVEN version =3.2.0, =1.0.1, =0.0.25, =0.0.25, =0.0.62, =0.0.25, =0.0.86, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =3.34.0.3-1-3.1, =0.0.3, =1.0.0, =1.4.0, =1.4.0, =1.7.0 and more Source cves: CVE-2020-9492 Source advisory: OSV:GHSA-F8VC-WFC8-HXQH...

Google Android 权限许可和访问控制问题漏洞

Google Android is a Linux-based open source operating system from Google. A vulnerability exists in the Google Android Permission License and Access Control issue. An attacker can exploit the vulnerability to obtain sensitive information about affected components...

Apache Log4j Vulnerability - Lenovo Support US

No description provided...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An input validation error vulnerability exists in Google Android, which can be exploited by attackers to obtain sensitive information about affected components...

Easy-XML 代码问题漏洞

Easy-Xml is used to provide a simplified view of Xml documents.Easy-XML is vulnerable to XML external entity injection, which stems from errors such as configuration during the operation of a network system or product, and can be exploited by an unauthorized attacker to obtain sensitive informati...

Adobe Acrobat Reader 路径遍历漏洞

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. A path traversal vulnerability exists in Adobe Acrobat Reader, which stems from a configuration or other error in the operation of the product. An unauthorized attacker could exploit the vulnerability to obtain...

SAP BusinessObjects Business Intelligence Platform和SAP BusinessObjects Business Intelligence Platform 代码问题漏洞

SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and quickly and...

Intel Processors 信息泄露漏洞

Intel Processors is an American Intel company that provides the ability to interpret computer instructions and process data in computer software. An information disclosure vulnerability exists in Intel Processors, which arises from errors such as configuration during operation of a networked syst...

com.vaadin:flow (>=1.0.0 <=1.0.13), com.vaadin:flow-client (>=1.0.0 <=1.0.13) +30 more potentially affected by CVE-2021-31404 via com.vaadin:flow-server (>=1.0.0 <=1.0.13)

com.vaadin:flow-server MAVEN version =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =10.0.13, =10.0.17 - com.vaadin:vaadin-board-flow =2.0.1 - com.vaadin:vaadin-button-flow =1.0.0 - com.vaadin:vaadin-charts-flow =6.0.1 - com.vaadin:vaadin-checkbox-flow...

Atlassian Jira Server 和 Data Center 信息泄露漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center, which arises from errors such as...

Telegram Information Disclosure Vulnerability

Telegram is an instant messaging mobile application. An information disclosure vulnerability exists in Telegram that originates from errors such as configuration during operation of a networked system or product. An unauthorized attacker could exploit the vulnerability to obtain sensitive...

Google Android Information Disclosure Vulnerability

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android OS There is an information disclosure vulnerability, the vulnerability stems from the network system or product in the operation process there are configuration and other...

Google Android Information Disclosure Vulnerability

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android OS There is an information disclosure vulnerability, the vulnerability stems from the network system or product in the operation process there are configuration and other...

ZTE Router F602W Information Disclosure Vulnerability

ZTE Router is a wireless router device from ZTE. An information disclosure vulnerability exists in the ZTE Router F602W product, which originates from errors such as configuration during operation of the network system or product. An unauthorized attacker can exploit the vulnerability to obtain...

org.sonatype.nexus.assemblies:nexus-base-feature (>=3.10.0-04 <=3.21.1-01), org.sonatype.nexus.assemblies:nexus-base-template (>=3.10.0-04 <=3.21.1-01) +33 more potentially affected by CVE-2020-10199 via org.sonatype.nexus:nexus-extdirect (>=3.10.0-04 <=3.21.1-01)

org.sonatype.nexus:nexus-extdirect MAVEN version =3.10.0-04, =3.10.0-04, =3.10.0-04, =3.21.0-01, =3.12.0-01, =3.10.0-04, =3.12.0-01, =3.10.0-04, =3.17.0-01, =0.0.1, =0.0.2, =0.0.3, =0.0.4, =0.0.13, =1.0.3 and more Source cves: CVE-2020-10199 Source advisory:...

Samsung Mobile Device Information Disclosure Vulnerability (CNVD-2020-30774)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. The Samsung mobile device information disclosure vulnerability can be exploited by attackers to obtain sensitive information about affected components...

Samsung Mobile Device Information Disclosure Vulnerability (CNVD-2020-32818)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in Samsung mobile devices, which can be exploited by attackers to obtain sensitive information about affected...

Nextcloud Talk Authorization Issues Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud Talk is vulnerable to an authorization issue. The vulnerability stems from errors such as configuration during operation of a networked system or...

Linux KVM Information Disclosure Vulnerability

Linux KVM is a kernel-based virtual machine for Linux. An information disclosure vulnerability exists in Linux KVM. The vulnerability stems from errors such as configuration during operation of a networked system or product. An unauthorized attacker could exploit the vulnerability to obtain...

CVE-2019-19968

PandoraFMS 742 suffers from multiple XSS vulnerabilities, affecting the Agent Management, Report Builder, and Graph Builder components. An authenticated user can inject dangerous content into a data store that is later read and included in dynamic content...