17647 matches found
CVE-2020-5055
CVE-2020-5055 is rejected/not used; this candidate was not assigned to issues.
CVE-2021-22493
CVE-2021-22493 is a duplicate of CVE-2021-25346. The connected documents identify the underlying issue as a vulnerability in the Samsung quram library prior to SMR Jan-2021 Release 1 that can cause an arbitrary memory overwrite and, consequently, arbitrary code execution. Public sources describe ...
Arbitrary File Download Vulnerability in the Collaboration Office System of Beijing Zhiyuan Internet Software Co.
Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet was founded in March 2002, is a technology enterprise integrating product design, research and development, sales and service. An arbitrary file download vulnerability exists in the collaborative office system of Beijing Zhiyuan Internet...
SQL Injection Vulnerability in NVS3000 Integrated Video Surveillance Platform of Datang Telecom Technology Co.
Datang Telecom Technology Co., Ltd. is a provider of products and integrated solutions in the field of information and communications. A SQL injection vulnerability exists in the NVS3000 integrated video surveillance platform of Datang Telecom Technology Co. An attacker can exploit the...
CVE-2019-25011
NetBox
CVE-2018-19941
CVE-2018-19941 affects QNAP NAS devices, enabling an attacker to read sensitive information stored in cleartext cookies. Concrete details in connected sources show the affected products and fixed versions: QTS 4.5.1.1456 build 20201015 (and later); QuTS hero h4.5.1.1472 build 20201031 (and later)...
CVE-2020-35865
The CVE-2020-35865 entry concerns the os_str_bytes crate for Rust, prior to version 2.0.0, which contains code that relies on the behavior of std::char::from_u32_unchecked. This reliance constitutes false assumptions about the unchecked conversion in char::from_u32_unchecked and is described acro...
CVE-2020-28736
CVE-2020-28736 affects Plone prior to 5.2.3. A XXE vulnerability exists in a feature protected by the unapplied permission plone.schemaeditor.ManageSchemata, making it accessible only to the Manager role. This leads to XML External Entity attacks that could impact confidentiality, integrity, and ...
Japanese Aerospace Firm Kawasaki Warns of Data Breach
Japanese aerospace company Kawasaki Heavy Industries on Monday warned of a security incident that may have led to unauthorized access of customer data. According to the company’s data breach notification, it first discovered unauthorized parties accessing a server in Japan, from an overseas offic...
CVE-2020-35448
CVE-2020-35448 affects GNU Binutils’ libbfd in CP4S (Binary File Descriptor) integration. The issue is a heap-based buffer over-read in bfd_getl_signed_32 in libbfd.c caused by lack of validation of sh_entsize in _bfd_elf_slurp_secondary_reloc_section() in elf.c, which can crash the application (...
IBM Spectrum Protect Plus Command Injection (CVE-2020-4206)
A command injection vulnerability exists in IBM Spectrum Protect Plus. The vulnerability is due to a lack of input validation in the Administrative Console service when parsing the timezone parameter...
North Korean Hackers Trying to Steal COVID-19 Vaccine Research
Threat actors such as the notorious Lazarus group are continuing to tap into the ongoing COVID-19 vaccine research to steal sensitive information to speed up their countries' vaccine-development efforts. Cybersecurity firm Kaspersky detailed two incidents at a pharmaceutical company and a...
CVE-2020-2505
CVE-2020-2505 affects QNAP QES; the issue is the generation of error messages that could disclose sensitive information when exploited. Public details in connected sources confirm QES 2.1.1 Build 20201006 and later fix the vulnerability. CVSS data from NVD indicates a low-severity, local-access i...
CVE-2020-25612
CVE-2020-25612 affects Mitel MiCollab/NuPoint Messenger prior to version 9.2. The vulnerability stems from insufficient access control, enabling an attacker with escalated privileges to access user files and potentially disclose sensitive information. Public details in connected sources consisten...
CVE-2020-27781
CVE-2020-27781 affects Ceph and specifically allows privilege escalation via Native CephFS consumers of OpenStack Manila. An OpenStack Manila user can request access to a share for an arbitrary cephx user; the interface drivers reveal the access key, enabling all users in the requesting project t...
NEC ISM Client Trust Management Issue Vulnerability
NEC ISM Client is a client software from NEC Corporation that is used to manage NEC storage systems. NEC ISM Client has a trust management issue vulnerability that stems from the vulnerability of NEC ISM Client running on NEC Storage Manager or NEC Storage Manager Express to incorrect server...
CVE-2020-29481
An issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid. Unfortunately, existing granted access rights are not removed when a domain is being destroyed. This means that a new domain created with the same domid will inherit the access rights to Xenstore nodes...