CVE-2020-27937

A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.0.1. A malicious application may be able to access private information...

Kopano Groupware Core Denial of Service Vulnerability

Kopano Groupware Core is an application from the Dutch company Kopano. Provides Groupware features for Kopano stacks and in most cases they are the core of every Kopano environment. A denial of service vulnerability exists in Kopano Groupware Core, which can be exploited by an attacker to exhaust...

Meow Street App Has Denial of Service Vulnerability

Meow Street APP by Alibaba's new consumer shopping tool, is the entity business to build "Internet +" platform. A denial of service vulnerability exists in Meow Street APP. An attacker can exploit the vulnerability to cause the application to crash...

Online Faculty Clearance System 1.0 Cross Site Scripting

Exploit Title: Online Faculty Clearance System Persistent Cross Site Scripting Exploit Author: th3d1gger Vendor Homepage: https://sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/onlineclearance0.zip Version: 1.0 Tested on Windows 10 @attack...

Companion Heart App in Denial of Service Vulnerability

Companion Heart App is an online voice and video socialization application, with voice chat rooms, game competition and other online and offline sharing skills themed interactions, mutual invitations, and socialization based on interests. Companion Heart App is vulnerable to a denial of service...

The vulnerability of the Intel Data Migration application, related to errors in using standard permissions, allows a perpetrator to increase their privileges.

The vulnerability of the Intel Data Migration application is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...

Unspecified Vulnerability in Samsung Mobile MobileWips

Samsung Mobile MobileWips is an application from Samsung Mobile, a South Korean company. It provides an application that comes with Samsung cell phones. A security vulnerability exists in SMR Feb-2021 Release 1 that allows unauthorized operations, including denial-of-service attacks, by hijacking...

UltimateKode Neo Billing Cross-Site Scripting Vulnerability

Envato Neo Billing is an Envato open source application. Provides a well-designed enterprise billing and accounting solution. UltimateKode Neo Billing before 3.5 suffers from a cross-site scripting XSS vulnerability that stems from the lack of proper validation of client-side data in the WEB...

Apache MyFaces Cross-Site Request Forgery Vulnerability

Apache MyFaces Trinidad is a U.S. Apache Apache Foundation contains a large number of enterprise-class component libraries and support for attachment JSF framework. A cross-site request forgery vulnerability exists in Apache MyFaces. The vulnerability stems from a lack of proper validation of...

Schneider PowerLogic 产品跨站请求伪造漏洞

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A buffer overflow vulnerability exists in BIG-IP, which originates when a network system or product performs an operation in...

Apache MyFaces Trinidad 跨站请求伪造漏洞

Apache MyFaces Trinidad is a U.S. Apache Apache Foundation contains a large number of enterprise-class component libraries and support for attachment JSF framework. A cross-site request forgery vulnerability exists in Apache MyFaces. The vulnerability stems from a lack of proper validation of...

Sourcecodester Pisay Online E-Learning System SQL注入漏洞

Sourcecodester Pisay Online E-Learning System is an online e-learning system based on PHP and MySQL. Sourcecodester Pisay Online E-Learning System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in a database-based...

Denial Of Service (DoS)

mysql is vulnerable to denial of service. An easy to exploit vulnerability allows an attacker to crash the application...

b2evolution Input Validation Error Vulnerability

b2evolution is a community content management system based on PHP and MySQL. An input validation error vulnerability exists in B2evolution Cms, which arises from a network system or product that does not properly validate input data...

GotoAndPlay SNC SmartFoxServer Cross-Site Scripting Vulnerability

GotoAndPlay SNC SmartFoxServer is a development tool from GotoAndPlay SNC, USA. It provides rapid development of multiplayer games and applications. A cross-site scripting vulnerability exists in SmartFoxServer version 2.17.0. The vulnerability stems from a lack of proper validation of client-sid...

IBM API Connect 跨站请求伪造漏洞

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing and securing APIs, microservices and more. IBM API Connect suffers from a cross-site request forgery vulnerability, which arises from a WEB...

Security Bulletin: Multiple vulnerabilites affect IBM Jazz Foundation and IBM Engineering products.

Summary There are multiple vulnerabilities in IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS Next, IBM Engineering Lifecycle Optimization - Engineering Insights EN...

Microchip Libraries for Applications Encryption Problem Vulnerability

Microchip Libraries for Applications is a microchip library for applications from Microchip. A cryptographic vulnerability exists in Microchip Libraries for Applications, which can be exploited by an attacker to decrypt information returned by the application in question, resulting in a disclosur...

Tufin Securechange Cross-Site Scripting Vulnerability

Tufin Securechange is a network management software for enterprise environments from Tufin USA. A cross-site scripting vulnerability exists in Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1, which stems from a lack of proper validation of client-side data by the WEB application. An attacker...

Denial of Service Vulnerability in CarSmart App

Car Smart APP is an intelligent transportation software developed based on the concept of Telematics. A denial-of-service vulnerability exists in CarSmart APP. An attacker can exploit the vulnerability to cause the application to crash...