17646 matches found
CVE-2021-30156
MediaWiki prior to 1.31.12 and 1.32.x through 1.35.x prior to 1.35.2 is affected. The vulnerability in Special:Contributions can leak that a hidden user exists. Remediation: upgrade to MediaWiki 1.31.12 or 1.35.2 (or later).
CVE-2020-14103
The CVE-2020-14103 entry concerns Xiaomi MIUI OS (pre-2020.01.15) where an application on mobile devices can read the device SNO information, constituting an information-disclosure flaw. Connected sources (NVD and Red Hat/NVD mirroring, CNNVD/CVE records) confirm affected product family (Xiaomi M...
Unauthorized Access Vulnerability in Youku Routerbot
Youku Routerbot is a smart router. Unauthorized access vulnerability exists in Youku Routerbao, which can be exploited by attackers to obtain sensitive information...
CVE-2020-11234
CVE-2020-11234 describes a Use-After-Free condition in Qualcomm Snapdragon family firmware: when sending a socket event message to a user application, invalid information can be passed if the socket is freed by another thread, leading to a local impact on Snapdragon Auto, Snapdragon Compute, Snap...
CVE-2021-25692
CVE-2021-25692 affects Teradici PCoIP Connection Manager and Security Gateway versions prior to 21.01.3, where sensitive smart card data is logged in default INFO logs. The root cause is logging of sensitive credential material in normal logs, enabling potential exposure on systems with log acces...
CVE-2021-26833
CVE-2021-26833 concerns Cleartext Storage in a File or on Disk in TimelyBills for iOS (<= 1.7.0) and Android (
CVE-2021-30162
An issue was discovered on LG mobile devices with Android OS 4.4 through 11 software. Attackers can leverage ISMS services to bypass access control on specific content providers. The LG ID is LVE-SMP-210003 April 2021...
Mini Mouse 9.3.0 - Local File inclusion / Path Traversal Vulnerabilities
Exploit Title: Mini Mouse 9.3.0 - Local File inclusion / Path Traversal Author: gosh Vendor Homepage: http://yodinfo.com Software Link: https://apps.apple.com/us/app/mini-mouse-remote-control/id914250948 Version: 9.3.0 Tested on: iPhone; iOS 14.4.2 GET /op=getdeviceinfo HTTP/1.1 Host:...
CVE-2021-20307
CVE-2021-20307 affects libpano13, specifically the panoFileOutputNamesCreate() formatter path in versions up to 2.9.20 (rc2 and earlier). The vulnerability is a format string issue that can lead to reading and writing arbitrary memory values, with potential for remote memory disclosure and, per t...
Arbitrary File Read Vulnerability in the javaee Forum System of Beijing Weike Tongshuo Technology Co.
Beijing Weike Tongshuo Technology Co., Ltd. is a professional enterprise that provides Internet full integrated marketing services for large enterprises and organizations. There is an arbitrary file reading vulnerability in the javaee forum system of Beijing Microcomputer Technology Co. Ltd, whic...
CVE-2020-11922
An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent encrypted and has low risk in isolation, it decreases the privacy of the end user. The information sent includes the local IP address being...
CVE-2020-11922
CVE-2020-11922 affects WiZ Colors A60 (1.14.0). The vulnerability is an information disclosure where the device sends unnecessary data to the cloud controller server, including the local IP address and the SSID of the connected Wi‑Fi network. The data is encrypted, and the impact is privacy-relat...
CVE-2021-23924
Summary: Devolutions Server prior to 2020.3 contains an information-disclosure vulnerability where diagnostic files expose sensitive data. Affected product: Devolutions Server (versions before 2020.3). Vulnerability: Exposure of sensitive information in diagnostic files. Root cause stated as info...
SQL Injection Vulnerability in Medical Online Exam System
Ltd. is a high-tech company dedicated to the research, development and sales of software products in the medical science and education industry. SQL injection vulnerability exists in Medical Online Exam System. An attacker can exploit the vulnerability to obtain sensitive information in the...
PUB-A-170141832
Bulletin has no description...
CVE-2018-1107
CVE-2018-1107 describes a Denial of Service in the is-my-json-valid JavaScript library due to an inefficient regular expression used to validate emails. A crafted JSON file can cause high CPU consumption when validated, leading to potential service degradation or outage. The vulnerability is tied...
CVE-2021-27352
Ilch CMS version 2.1.42 contains an open redirect vulnerability that enables an attacker to redirect authenticated users to an attacker‑controlled site after login. The CVE-2021-27352 entry is reflected across multiple sources, but the connected documents do not provide concrete exploit steps or ...
CVE-2021-21396
The CVE-2021-21396 entry concerns wire-server, the backend for Wire. Affected version window is 2021-02-16 through 2021-03-02, where the GET /users/list-clients endpoint exposed client metadata for all users. Any logged-in user could request details of other users (no connection requirement) by g...
CVE-2021-23888
CVE-2021-23888 affects McAfee ePolicy Orchestrator (ePO) and is an unvalidated client-side URL redirect vulnerability in ePO prior to 5.10 Update 10. An authenticated ePO user could load an untrusted site inside an ePO iframe, potentially enabling information theft. Connected sources confirm the ...