478 matches found
Security Bulletin: PostgreSQL vulnerabilities in IBM Robotic Process Automation with Automation Anywhere - CVE-2021-3393
Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to attacks involving PostgreSQL. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM Robotic Process...
qimengcms has a logic flaw vulnerability
qimengcms is a content management system. A logic flaw vulnerability exists in qimengcms, which can be exploited by an attacker to compromise the integrity of the system...
SQL Injection Vulnerability in NetGuard Network Audit System of Beijing NetGuard Nebula Information Technology Co.
Netnifty Network Security Audit System is a compliance management system for fine-grained auditing of users' operational behavior on core IT assets and servers within the network in a business environment. A SQL injection vulnerability exists in the Netnifty Network Audit System of Beijing Netnif...
ZeroMQ 资源管理错误漏洞
ZeroMQ is a lightweight distributed messaging engine core library . A security vulnerability exists in ZeroMQ that stems from an uncontrolled resource consumption flaw. A remote, unauthenticated attacker can exploit the vulnerability to send a crafted PUB message that consumes too much memory,...
[ASA-202105-6] keycloak: multiple issues
Arch Linux Security Advisory ASA-202105-6 ========================================= Severity: High Date : 2021-05-19 CVE-ID : CVE-2020-14302 CVE-2020-27838 CVE-2021-3513 CVE-2021-20202 CVE-2021-20222 Package : keycloak Type : multiple issues Remote : Yes Link :...
CVE-2020-36238
The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a username is valid or not via a missing permissions check...
SEO Panel Temporal SQL Blind Betting Vulnerability
SEO Panel is a free, open source SEO optimization software. A temporal SQL blind injection vulnerability exists in the ordercol parameter in archive.php in Seo Panel version 4.8.0. An attacker can exploit this vulnerability to retrieve all databases...
Google Chrome heap buffer overflow vulnerability (CNVD-2021-16863)
Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A heap buffer overflow vulnerability exists in TabStrip in versions prior to Google Chrome 89.0.4389.72. An attacker can use this vulnerability to exploit heap...
Weak Password Vulnerability in ZTE Corporation IAD 16FXS
ZTE Corporation is a leading global provider of integrated communications solutions. A weak password vulnerability exists in the ZTE Corporation IAD 16FXS, which can be exploited by attackers to obtain sensitive information...
Google Android Media Framework Remote Code Execution Vulnerability (CNVD-2021-19751)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the Media Framework component of Google Android 8.1, 9, 10, and 11. An attacker can exploit this vulnerability to...
CVE-2021-25323
The default setting of MISP 2.4.136 did not enable the requirements aka requirepasswordconfirmation to provide the previous password when changing a password...
CVE-2020-27148
The TIBCO EBX Add-on for Oracle Hyperion EPM, TIBCO EBX Data Exchange Add-on, and TIBCO EBX Insight Add-on components of TIBCO Software Inc.'s TIBCO EBX Add-ons contain a vulnerability that theoretically allows a low privileged attacker with network access to execute an XML External Entity XXE...
PYSEC-2021-62
python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS1 v1.5 ciphertext...
CVE-2020-27694
Trend Micro InterScan Messaging Security Virtual Appliance IMSVA 9.1 has updated a specific critical library that may vulnerable to attack...
MGASA-2020-0383 Updated phpmyadmin packages fix security vulnerabilities
A vulnerability was discovered where an attacker can cause an XSS attack through the transformation feature. If an attacker sends a crafted link to the victim with the malicious JavaScript, when the victim clicks on the link, the JavaScript will run and complete the instructions made by the...
CVE-2020-1963
Apache Ignite (which uses H2 for its distributed SQL execution) has a vulnerability where H2 SQL functions could be abused to access the filesystem. The connected advisories corroborate that this vulnerability involves file-system access via H2 within Ignite. No exploit specifics, affected versio...
OSIsoft PI Data Archive Code Issue Vulnerability
OSIsoft PI Data Archive is a file archiving and storage component for PI Server from OSIsoft, USA. The component is mainly used for archiving and storing configuration information and time series data. A code issue vulnerability exists in OSIsoft PI Data Archive versions 2018 and 2018 SP2. A remo...
Information disclosure
cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature SEC-540...
Tecnick.com TCExam Cross-Site Scripting Vulnerability (CNVD-2020-32377)
Tecnick.com TCExam is a Web-based open source e-exam system from Tecnick.com, UK. The system is mainly used for online exams and more. A cross-site scripting vulnerability exists in Tecnick.com TCExam version 14.2.2, which can be exploited by remote attackers to inject malicious JavaScript code...
