11762 matches found
The vulnerability of the transmission function of the programmatically defined Cisco SD-WAN system allows a hacker to overwrite any files they desire.
The vulnerability of the transmission function of the programmatically defined Cisco SD-WAN network is related to access control errors. Exploiting this vulnerability could allow a attacker to rewrite any files at will...
The vulnerability in the web interface for managing microprogrammed software routers such as RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P allows a hacker to bypass authentication checks and load arbitrary files.
The vulnerability of the web-based management interface for microprogrammed software routers RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P is related to control session errors on affected devices. Exploiting this vulnerability allows a malicious actor to bypass...
OpenIAM Access Control Error Vulnerability
OpenIAM is a fully integrated identity and access management platform. Vulnerabilities exist in OpenIAM versions prior to 4.2.0.3 due to access control errors in the "Create User", "Modify User Privileges" and "Password Reset" operations. No details of the vulnerabilities are available at this ti...
The vulnerability of the Titan M security module for Android operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Titan M security module for Android operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the security module of the Titan M operating system for Android, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the Titan M security module’s Android operating system kernels is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Titan M security module for Android operating systems allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability in the implementation of the TLS protocol by the OpenSSL library, which allows a attacker to cause a service failure
The vulnerability of the TLS protocol implementation in the OpenSSL library is related to pointer arithmetic errors. Exploiting this vulnerability allows a malicious actor to cause a service failure by using a specially crafted “ClientHello” message...
The vulnerability of the get_old_root file in the fs/btrfs/ctree.c module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the getoldroot file in the fs/btrfs/ctree.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the security module of the Titan M operating system for Android, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the Titan M security module’s kernel in Android operating systems is related to initialization errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Design/Logic Flaw
DISPUTED Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states "the feature still requires a...
The vulnerability of the GlobalProtect SSL VPN implementation in the PAN-OS operating system allows a intruder to gain unauthorized access to protected information.
The vulnerability of the GlobalProtect SSL VPN implementation for the PAN-OS operating system is related to errors in the certificate authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Debian DLA-2610-1 : linux-4.19 security update
Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service, or information leaks. CVE-2020-27170, CVE-2020-27171 Piotr Krysiuk discovered flaws in the BPF subsystem's checks for information leaks throu...
PT-2021-14674 · Jenkins · Jenkins Cloud Statistics Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Cloud Statistics Plugin versions 0.26 and earlier Description: The issue concerns a lack of permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view related...
The vulnerability of the DNS server service in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the DNS server service in Windows operating systems is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to errors in pointer assignment. This vulnerability allows attackers to circumvent existing security restrictions through brute-force attacks.
The vulnerability of Moxa VPORT 06EC-2V series IP cameras’ microprogramming software is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions through brute-force attacks...
The vulnerability of the Auto-Fill function in the Google Chrome browser allows a hacker to gain access to confidential data.
The vulnerability of the Auto-Fill function in Google Chrome is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability of the DNS server service in Windows operating systems allows a hacker to cause a service failure.
The vulnerability of the DNS server service for Windows operating systems is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Jenkins Cloud Statistics 安全漏洞
CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . An improper authorization...
CVE-2020-10582
A SQL injection on the /admin/displayerrors.php script of Invigo Automatic Device Management ADM through 5.0 allows remote attackers to execute arbitrary SQL requests including data reading and modification on the database...