17647 matches found
Code Execution Vulnerability in 1039 Inc.'s Homeschooling
Beijing One Zero Three Nine Technology Development Co., Ltd 1039 Company for short is a technology enterprise specializing in standardized software development and large-scale applied platform for the training industry, and is a partner in the information construction of the training industry. A...
CVE-2021-25284
Removed by vendor...
CVE-2020-28646
creationtimestamp| type| source ---|---|--- 2021-02-26 18:38:56+00:00| seen| https://t.me/cibsecurity/24218...
Design/Logic Flaw
LMA ISIDA Retriever 5.2 is vulnerable to XSS via query'text'...
CVE-2021-21724
CVE-2021-21724 affects ZTE ZXR10 8900E (all versions up to V3.03.20R2B30P1). The issue is a memory leak caused by improper handling of memory release in certain scenarios. A local attacker with device permissions can repeatedly attenuate the optical signal to trigger the leak, leading to abnormal...
CVE-2021-23953
CVE-2021-23953 concerns an information-disclosure vulnerability in the PDF handling of Mozilla Firefox (before 85.0) and Thunderbird (before 78.7), plus Firefox ESR before 78.7. The issue arises when a user opens a specially crafted PDF, which could leak cross-origin data served as chunked data. ...
CVE-2021-23971
CVE-2021-23971 concerns Mozilla Firefox: when processing a redirect with a conflicting Referrer-Policy, the browser would adopt the redirect’s policy, potentially leaking more information to the destination than intended by the original origin. Affected: Firefox versions earlier than 86. The conn...
CVE-2021-23973
CVE-2021-23973 describes a cross-origin loading issue in audio/video contexts where a decoding error could leak information about the resource. Affected software: Firefox versions older than 86, Thunderbird older than 78.8, and Firefox ESR older than 78.8. Public-facing details confirm this vulne...
Command Execution Vulnerability in ZXHN H168N at ZTE Corporation
ZTE Corporation is a leading global provider of integrated communications solutions. A command execution vulnerability exists in ZXHN H168N of ZTE Corporation, which can be exploited by an attacker to execute arbitrary commands...
Security Bulletin: A vulnerability in IBM Java Runtime affects IBM MessageGateway (CVE-2020-14781)
Summary There is a vulnerability in IBM Runtime Environment Java Version 8.0 used by IBM MessageGateway. This issue was disclosed as part of the IBM Java SDK updates in October, 2020. Vulnerability Details CVEID: CVE-2020-14781 DESCRIPTION: An unspecified vulnerability in Java SE related to the...
Microsoft listed as a Representative Vendor in 2020 Gartner Market Guide for Insider Risk Management Solutions
While organizations have long prioritized external cybersecurity risks, many have not paid enough attention to the risks posed by trusted insiders in their organizations. This is a mistake. Insiders often already have access to sensitive data, and the risks, whether malicious or inadvertent, can...