17646 matches found
CVE-2020-6786
CVE-2020-6786 : Concrete details from connected documents show a local code execution issue in the Bosch Video Recording Manager installer due to an Uncontrolled Search Path Element when loading a DLL. Affected versions are up to 3.82.0055 (3.82 line) and up to 3.81.0064 (3.81/3.71 and older). Th...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Directory Server
Summary There are vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with IBM Security Directory ServerSDS. The issues were disclosed as part of the IBM SDK, Java Technology Edition Quarterly CPU - Apr 2020 which includes Oracle Apr 2020 CPU minus CVE-2020-2773 , Oracle Jul 2020...
CVE-2021-22169
GitLab EE 13.4+ is identified as leaking internal IP addresses via error messages (CVE-2021-22169). Available sources consistently describe an information-disclosure issue in GitLab Enterprise Edition that reveals internal IPs through error handling. The concrete details beyond the high-level des...
Cross Site Scripting vulnerability allows injecting HTML code into table edits
h3. Issue Summary Cross Site Scripting vulnerability allows injecting HTML code into table edits h3. Steps to Reproduce Edit a page Then access the Insert macro 'Info' option. A new window will open, in which the Preview option must be selected. With the help of an intermediate proxy such as burp...
CVE-2021-29133
CVE-2021-29133 affects haserl, a component of the Alpine Linux Configuration Framework. Before 0.9.36, it fails to verify context, enabling local users to read arbitrary files on the filesystem. Affected: haserl prior to 0.9.36 (Alpine Linux Configuration Framework). Known remediation: upgrade to...
Online Faculty Clearance System 1.0 Cross Site Scripting
Exploit Title: Online Faculty Clearance System Persistent Cross Site Scripting Exploit Author: th3d1gger Vendor Homepage: https://sourcecodester.com Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/onlineclearance0.zip Version: 1.0 Tested on Windows 10 @attack...
Weak Password Vulnerability in Huawei USG2130BSR-W Login System
Huawei is a leading global provider of information and communications solutions. A weak password vulnerability exists in the Huawei USG2130BSR-W login system, which can be exploited by attackers to obtain sensitive information...
Weak Password Vulnerability in Multiple Systems at PCCW Technology
INFOGO TECHNOLOGY CO.,LTD is a leading information security vendor specializing in the research, development, sales and service of network access control NAC products. INFOGO TECHNOLOGY CO., LTD is a leading information security vendor specializing in the research, development, sales and service ...
CVE-2020-13605
CVE-2020-13605 is rejected/not used per the Initial Description.
CVE-2020-9212
There is a vulnerability in some version of USG9500 that the device improperly handles the information when a user logs in to device. The attacker can exploit the vulnerability to perform some operation and can get information and cause information leak...
CVE-2021-21437 Config Items are shown to users without permission
Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions...
CVE-2021-21438
The CVE-2021-21438 affects OTRS, specifically the FAQ module. Affected: OTRS 7.0.x up to prior to 7.0.24 and FAQ component up to 6.0.29. Root cause: information disclosure by allowing non-permitted users to view linked FAQ articles. Impact: unauthorized visibility of FAQ content (partial confiden...
[SECURITY] Fedora 34 Update: tali-40~rc-1.fc34
Sort of poker with dice and less money. An ancient Roman game...
CVE-2021-22848
HGiga MailSherlock is affected by a SQL injection vulnerability. The issue arises from lack of validation of externally entered SQL statements in URL parameters of email pages, allowing remote attackers to inject SQL syntax and execute commands. Root cause: input validation failure in database-ba...
Weak Password Vulnerability in H3C ER3108GW System Management
ER3108GW is a new generation of enterprise-class wireless high-performance router launched by Hangzhou Huasan Communication Technology Co. A weak password vulnerability exists in the H3C ER3108GW system management, which can be exploited by an attacker to log into the system backend and obtain...