17644 matches found
Tencent Live suffers from Janus Android signature vulnerability
Tencent Live is a live streaming software. Tencent Live exists Janus Android signature vulnerability, attackers can use the vulnerability to obtain system root privileges...
CVE-2007-1857
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
Unauthorized Access Vulnerability in Mingguo APT Attack (Cyber Warfare) Warning Platform
Hangzhou ACE Information Technology Co., Ltd. is a company that has been focusing on the research, development, production and sales of products in the field of network information security, such as Fortress, Remote Monitoring, Cloud Saas Service, Cloud WAF, Industrial Control, Online Remote Offi...
Weak Password Vulnerability in DH-SD-6A9226F-HNI of Zhejiang Dahua Stock Technology Co.
Zhejiang Dahua Technology Co., Ltd. is a leading supplier and solution provider of surveillance products. Zhejiang Dahua Technology Co., Ltd DH-SD-6A9226F-HNI has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...
File upload vulnerability exists in super cms (CNVD-2021-46845)
Super CMS is a content management system. A file upload vulnerability exists in super cms, which can be exploited by attackers to gain control of the server...
Lessons Learned from 100 Data Breaches: Part 4, Trends in Average Volumes of Stolen Records
Imperva research shows an increase in the volume of data stolen every year. In 2020, we started to see more and more breaches that exfiltrate records in billions. Based on the analysis of thousands of data breach details published on dbdigest, we made calculations on the raw data and found some...
CVE-2021-32946
CVE-2021-32946 affects Siemens/Open Design Alliance Drawings SDK parsing of DGN files (Versions 2022.4 and earlier). Root cause: improper validation of user-supplied data in the Drawings SDK parsing path, leading to out-of-bounds conditions that may cause denial-of-service or code execution in th...
CVE-2021-1569
Cisco Jabber for Windows, along with Jabber for Mac and mobile, is affected by CVE-2021-1569 due to improper validation of message content in XMPP handling. This can allow an authenticated, remote attacker to access sensitive information (information disclosure) or cause a denial of service (DoS)...
CVE-2021-21441
CVE-2021-21441 is a Cross‑Site Scripting (XSS) vulnerability in OTRS where the ticket overview screen can leak information when an e‑mail is shown. Exploitation can be performed by sending a specially crafted e‑mail to the system and does not require user interaction. Affected products/versions i...
PHDays 10: U.S. Sanctions, My Talk on Vulristics, Other Great Talks Related to VM
Today I will talk about the Positive Hack Days conference, which took place on May 20 and May 21 in Moscow. I can say that this was and remains the main event for Information Security Practitioners in Russia. First of all, I have to say a few words about the sanctions. The organizer of the event,...
TikTok Can Now Collect Biometric Data
This is probably worth paying attention to: A change to TikToks U.S. privacy policy on Wednesday introduced a new section that says the social video app "may collect biometric identifiers and biometric information" from its users content. This includes things like "faceprints and voiceprints," th...
CVE-2021-32557
CVE-2021-32557 fixes a vulnerability in Ubuntu Apport where process_report() in data/whoopsie-upload-all could write arbitrary files via symlinks. The CVSSv3.1 vector (LOCAL, LOW to MEDIUM/LOW privileges, I and A HIGH) points to a LOCAL attack with high impact on integrity and availability. Affec...