Network Time Protocol Information Disclosure Vulnerability

Network Time Protocol NTP, Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. An information disclosure vulnerability exists in NTP version 4.2.7p25. The vulnerability arises from a configuration error in the operation of the network...

OpenStack Nova Information Disclosure Vulnerability (CNVD-2019-44961)

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration and Rackspace, Inc. in the U.S. OpenStack Nova is one of the cloud computing construct controllers written in Python. It is part of the IaaS system. An information disclosure...

Pegasystem PEGA Platform Information Disclosure Vulnerability (CNVD-2019-45126)

Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications for BPM Business Process Management, Case Management, Real Time Decision Making and CRM Customer Relationship Management. An information disclosure vulnerabili...

WordPress W3 Total Cache Information Disclosure Vulnerability

W3 Total Cache is a website caching plugin. An information disclosure vulnerability exists in WordPress W3 Total Cache. The vulnerability stems from a configuration or other error in the operation of a networked system or product. An attacker can exploit this vulnerability to obtain sensitive...

Schneider Electric M340 Communication Modules Information Disclosure Vulnerability

The Schneider Electric M340 communication module is a communication module from Schneider Electric, France. An information disclosure vulnerability exists in multiple Schneider Electric products. The vulnerability arises from a configuration or other error in the operation of a networked system o...

CVE-2019-3428

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the management portal in HTTP, resulting in users’ information leakage...

CVE-2019-3428

The version V6.01.03.01 of ZTE ZXCDN IAMWEB product is impacted by a configuration error vulnerability. An attacker could directly access the management portal in HTTP, resulting in users’ information leakage...

CVE-2019-3428

CVE-2019-3428 affects ZTE ZXCDN IAMWEB v6.01.03.01. The issue is a configuration error that allows an attacker to directly access the management portal over HTTP, resulting in users’ information leakage. The available documents consistently describe a misconfiguration leading to exposure of manag...

Error: No Product Licenses Found on the License Server for the Selected Model

When configuring XenApp 6.5, the following error message is displayed: “No product licenses found on the license server for the selected model”...

Cryptocat Information Disclosure Vulnerability (CNVD-2019-40496)

Cryptocat is an open source web-based online chat software developed by Canadian software developer Nadim Kobeissi. The software supports encryption of communications. An information disclosure vulnerability exists in Cryptocat versions prior to 2.0.42. The vulnerability exists due to a...

The vulnerability of the multi-connection mode of the Microprogrammable Network Interface Device Firepower Threat Defense (FTD) allows a attacker to exit the container for their own instance of FTD and execute arbitrary commands with root privileges.

The vulnerability of the multi-connection mode of the Firepower Threat Defense FTD software relates to security configuration errors. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges from within the FTD instance...

The vulnerability of the ufw network firewall utility in the Astra Linux operating system, which allows a hacker to trigger a service failure under a configured policy-based integrity control for the file system.

The vulnerability of the ufw network firewall utility in the Astra Linux operating system is related to a configuration error that causes the utility to terminate abnormally when attempting to enable the ufw network firewall. Exploiting this vulnerability could allow an attacker to trigger a...

Google Android Touch Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA, and Touch driver is one of the touch drivers. The Touch driver component in Android has an information disclosure vulnerability that originates from a configuration error in a networked system or...

Google Android Touch Driver Information Disclosure Vulnerability (CNVD-2019-34472)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA, and Touch driver is one of the touch drivers. The Touch driver component in Android has an information disclosure vulnerability that originates from a configuration error in a networked system or...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38576)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38577)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Google Android Information Disclosure Vulnerability (CNVD-2019-38540)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker could...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38589)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Open-Xchange OX App Information Disclosure Vulnerability (CNVD-2019-40052)

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. mail compose is one of the mail editing components. An information disclosure vulnerability exists in Open-Xchange OX...

CORS-Vulnerable-Lab: with COSR configuration error related to the vulnerability code range-vulnerability warning-the black bar safety net

This repository contains the CORS configuration error related to the vulnerable code. You can be on the local machine to configure the vulnerable code, and to the actual use of the CORS related error configuration issue. In this case, I would first like to thank@albinowax, the AKReddy, And Vivek...