CVE-2021-43048

The CVE-2021-43048 vulnerability affects TIBCO PartnerExpress Interior Server and Gateway Server components, specifically versions 6.2.1 and earlier. The issue is a click-jacking vulnerability that can be exploited by an unauthenticated attacker with network access and requires no user interactio...

CVE-2021-43046 TIBCO PartnerExpress Session Token in URL

The Interior Server and Gateway Server components of TIBCO Software Inc.'s TIBCO PartnerExpress contain an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain session tokens for the affected system. A successful attack using this vulnerability...

CVE-2021-43046

CVE-2021-43046 affects TIBCO PartnerExpress (Interior Server and Gateway Server). The vulnerability allows an unauthenticated attacker with network access to obtain session tokens for the affected system, with the exploit requiring some user interaction. Affected releases are PartnerExpress 6.2.1...

Airangel Hsmx Gateway Hardcoded Credentials Vulnerability

Airangel Hsmx Gateway is a platform from Airangel UK, Inc. A hard-coded credential vulnerability exists in versions of Airangel Hsmx Gateway prior to 5.2.04, which stems from the use of PostgreSQL database credentials hard-coded in the configuration file. An attacker could steal this credential t...

Airangel Hsmx Gateway Remote Code Execution Vulnerability

Airangel Hsmx Gateway is a platform from Airangel UK, Inc. It is used to manage authentication and billing in the network.A remote code execution vulnerability exists in Airangel Hsmx Gateway prior to 5.2.04, which originates when a remote server controlled by an attacker downloads and runs a...

Binatone Motorola-branded Camera 安全漏洞

Binatone Motorola-branded Camera is a Binatone licensed Motorola-branded product camera from Binatone Inc. A buffer overflow vulnerability exists in Binatone Motorola-branded Camera, which can be exploited by attackers to perform denial of service attacks on the device...

CentOS 8 : python-psutil (CESA-2021:4324)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:4324 advisory. - python-psutil: Double free because of refcount mishandling CVE-2019-18874 Note that Nessus has not tested for this issue but has instead relied only on the...

CentOS 8 : dnsmasq (CESA-2021:4153)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:4153 advisory. - dnsmasq: fixed outgoing port used when --server is used with an interface name CVE-2021-3448 Note that Nessus has not tested for this issue but has instead...

WordPress Booking Package plugin <= 1.5.10 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Gen Sato Mitsui Bussan Secure Directions, Inc in WordPress Booking Package plugin versions = 1.5.10. Solution Update the WordPress Booking Package plugin to the latest available version at least 1.5.11...

OPNsense Cross-Site Scripting Vulnerability

OPNsense is an open source, FreeBSD-based firewall and routing software developed by Deciso Inc. A cross-site scripting vulnerability exists in versions prior to OPNsense 21.7.4. An attacker can exploit the vulnerability by returning LDAP attributes in the authentication tester to conduct...

Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor (PRM) Model 3120 has an unspecified vulnerability (CNVD-2022-77534)

The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable cardiac rhythm management Crm programming system from Boston Scientific, Inc. Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable rhythm management Crm programming...

Google Android System Information Disclosure Vulnerability (CNVD-2021-101431)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an information disclosure vulnerability exists in the System component of Google Android version 12. No detailed vulnerability details are available...

Google Android Framework Elevation of Privilege Vulnerability (CNVD-2021-101444)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the Framework component of Google Android version 11. No detailed vulnerability details are available...

Google Android System Information Disclosure Vulnerability (CNVD-2021-101430)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short.The System component of Google Android versions 9, 10, 11, and 12 is vulnerable to information disclosure, which could be exploited by attackers to cause local information...

Google Android Media Framework Elevation of Privilege Vulnerability (CNVD-2021-101438)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the Media Framework component of Google Android versions 9, 10, and 11. No detailed vulnerability details are available...

Google Android Framework Information Disclosure Vulnerability (CNVD-2021-101440)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an information disclosure vulnerability exists in the Framework component of Google Android versions 9, 10 and 11. No detailed vulnerability details are available...

Google Android Framework Elevation of Privilege Vulnerability (CNVD-2021-101442)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the Framework component of Google Android versions 9, 10, 11, and 12. No detailed vulnerability details are available...

Sensormatic Electronics VideoEdge

1. EXECUTIVE SUMMARY CVSS v3 6.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Sensormatic Electronics, LLC, a subsidiary of Johnson Controls, Inc. Equipment: VideoEdge Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability could allow...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2021-101437)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. an information disclosure vulnerability exists in the Media Framework component of Google Android versions 9, 10 and 11. No detailed vulnerability details are available...

Google Android System Elevation of Privilege Vulnerability (CNVD-2021-101432)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. Permissions...