13143 matches found
SQL Injection Vulnerability in Heybbs Micro Community v1.2
HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs micro-community v1.2 SQL injection vulnerability, attackers can use the vulnerability to obtain the database sensitive information leakage...
Heybbs Micro Community v1.2 suffers from SQL injection vulnerability (CNVD-2020-23506)
HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs micro-community v1.2 SQL injection vulnerability, the attacker can be the vulnerability to obtain sensitive database information...
CVE-2020-9519: Undefined Security Weakness
HTTP methods reveled in Web services vulnerability in Micro Focus Service manager server, affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The vulnerability could be exploited to allow exposure of configuration data...
Heybbs Micro Community v1.2 suffers from SQL injection vulnerability (CNVD-2020-23507)
HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs Micro Community v1.2 has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
PT-2020-20709
Name of the Vulnerable Software and Affected Versions Micro Focus Service Manager versions 9.40 through 9.63 Description The issue concerns a Web services vulnerability in the server component, where HTTP methods are revealed, potentially allowing the exposure of configuration data. Recommendatio...
VulnCheck KEV: CVE-2020-8468
Trend Micro Apex One, OfficeScan, and Worry-Free Business Security agents contain a content validation escape vulnerability that could allow an attacker to manipulate certain agent client components...
VulnCheck KEV: CVE-2020-8467
Trend Micro Apex One and OfficeScan contain an unspecified vulnerability within a migration tool component that allows for remote code execution...
PT-2020-6112
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan XG SP1 affected versions not specified Trend Micro Worry-Free Business Security 10 SP1 affected versions not specified Trend Micro Worry-Free Business Security Service...
PT-2020-1932
Name of the Vulnerable Software and Affected Versions Trend Micro Worry-Free Business Security versions 9.0 through 10.0 Description The issue exists due to insufficient input validation of the TempFileName parameter in the cgiRecvFile.exe executable of Trend Micro Worry-Free Business Security...
PT-2020-20708
Name of the Vulnerable Software and Affected Versions Micro Focus Service Manager Web Tier versions 9.50 through 9.62 Description The issue allows unauthorized access to configuration data due to a login filter vulnerability. This could be exploited to gain access to sensitive configuration files...
Shanghai Shangchuang Network Technology Co., Ltd. Ecjia to home H5 micro-mall has information leakage vulnerability
ECJia to home H5 micro mall is a free and open source O2O mobile e-commerce system. Shanghai Shangchuang Network Technology Co., Ltd. Ecjia to home H5 micro-mall there is an information leakage vulnerability, attackers can use the vulnerability caused by sensitive information leakage...
CVE-2020-9518: Undefined Security Weakness
Login filter can access configuration files vulnerability in Micro Focus Service Manager Web Tier, affecting versions 9.50, 9.51, 9.52, 9.60, 9.61, 9.62. The vulnerability could be exploited to allow unauthorized access to configuration data...
Heybbs Micro Community v1.2 suffers from SQL injection vulnerability (CNVD-2020-23505)
HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs Micro Community v1.2 has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
Trend Micro Password Manager DLL Hijacking Vulnerability (CNVD-2020-21008)
Trend Micro Password Manager is a secure password management solution from Trend Micro. A DLL hijacking vulnerability exists in version 5.0 of Trend Micro Password Manager for Windows platforms, which can be exploited by attackers to elevate privileges...
RSLogix 500 SMTP Information Disclosure
The vulnerability of the Simple Mail Transfer Protocol SMTP software from RSLogix 500, as well as the programmable logic controllers MicroLogix 1100 and MicroLogix 1400, is related to the unencrypted storage of critical information. Exploiting this vulnerability allows an attacker to gain access ...
Trend Micro Worry-Free Business Security (WFBS) Multiple Vulnerabilities (1114098)
The remote host is running a version of the Trend Micro WFBS which is affected by multiple vulnerabilities. An attacker who has already gained a foothold on the local WFBS server may manipulate configuration variables in order to access files outside of the web root folder or modify HTTP response...
CVE-2020-8469
Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...
CVE-2020-8469
Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation...