Microsoft Azure Arc 授权问题漏洞

Microsoft Azure Arc is a storage system provided by the American company Microsoft. It allows for the extension of the Azure platform into your environment. There are authorization-related vulnerabilities in Microsoft Azure Arc. Attackers can exploit these vulnerabilities to gain higher levels of...

CVE-2021-47787

TotalAV 5.15.69 contains an unquoted service path vulnerability in multiple system services running with LocalSystem privileges. Attackers can place malicious executables in specific unquoted path segments to potentially gain SYSTEM-level access by exploiting the service path configuration...

Newforma Project Center Server 安全漏洞

Newforma Project Center Server is a project information management solution for the Architecture, Engineering and Construction AEC industry from Newforma for centralized storage and management of project documents and collaboration. An information IELTS vulnerability exists in Newforma Project...

SAP NetWeaver Application Server和SAP ABAP Platform 授权问题漏洞

SAP NetWeaver Application Server and SAP ABAP Platform are both products of SAP, Germany.SAP NetWeaver Application Server is an application server.SAP ABAP Platform is an ABAP-based SAP ABAP Platform is an ABAP-based SAP solution. An authorization issue vulnerability exists in SAP NetWeaver...

The vulnerability of the Zstandard data compression library, related to the default access rights settings, allows attackers to gain access to confidential data.

The vulnerability of the Zstandard data compression library is related to the default access rights settings. Exploiting this vulnerability allows an attacker to gain access to confidential data...

Google Android 权限许可和访问控制问题漏洞

Google Android is a Linux-based open-source operating system from the U.S. company Google Google. Google Android has a security vulnerability that could be exploited by attackers to bypass authentication and gain access...

The vulnerability of the Linux operating system’s kernel, related to information disclosure, allows attackers to gain access to protected information.

The vulnerability of the Linux operating system’s kernel is related to the exposure of information. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the WordPress website content management system, related to the redirection of URLs to an unreliable website, allows attackers to access sensitive data and compromise its integrity.

The vulnerability of the WordPress website content management system is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integrity...

File Upload Vulnerability in Netnew Enterprise Website Management System

Netnew enterprise website management system is an ASP + ACCESS environment based on the development of website management system. A file upload vulnerability exists in Netnew Enterprise Website Management System, which can be exploited by an attacker to gain control of the web server...

Instagram Information Disclosure Vulnerability (CNVD-2019-31658)

Instagram is a social app that runs on mobile and is a fast, fabulous and fun way to share with each other the pictures you snap whenever you want. Instagram has an information disclosure vulnerability that can be exploited by attackers to gain access to sensitive information...

Siemens SINEMA Unauthorized Access Vulnerability

Siemens is a leading global technology company providing solutions to customers in the areas of power generation and transmission and distribution, infrastructure, industrial automation, drives and software through innovations in electrification, automation and digitalization. An unauthorized...

Multiple PDQ Products Privilege Acquisition Vulnerabilities (CNVD-2017-23005)

PDQ Manufacturing LaserWash G5 and others are automotive automatic cleaning equipment from PDQ Manufacturing USA. A security vulnerability exists in several PDQ products due to the program failing to pass usernames and passwords in a secure manner. An attacker could exploit the vulnerability to...

The vulnerability of the Oracle MySQL database management system allows a hacker to trigger a service failure.

The vulnerability of the MySQL Server component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain privileged access and cause the system to become unstable or crash using network packets...

Netatmo Weather Station Information Disclosure Vulnerability

Netatmo Weather Station is an air quality monitoring app. Netatmo Weather Station uses plaintext passwords, allowing attackers to exploit vulnerabilities to obtain sensitive information...