WordPress W3 Total Cache Information Disclosure Vulnerability

W3 Total Cache is a website caching plugin. An information disclosure vulnerability exists in WordPress W3 Total Cache. The vulnerability stems from a configuration or other error in the operation of a networked system or product. An attacker can exploit this vulnerability to obtain sensitive...

V-Zug Combi-Steam MSLQ Authorization Issue Vulnerability (CNVD-2019-42365)

The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...

IrfanView Code Issue Vulnerability

IrfanView is an image viewer by Irfan Skiljan software developer in Bosnia and Herzegovina that supports image browsing, image editing, image format conversion and more. A code issue vulnerability exists in IrfanView version 4.53. The vulnerability stems from an improperly designed or implemented...

Multiple Qualcomm Products Resource Management Error Vulnerability (CNVD-2020-16066)

Qualcomm MDM9205 and others are products of Qualcomm Incorporated USA.MDM9205 is a central processing unit CPU product. The QCS404 is a central processing unit CPU product.The SDX55 is a modem. A resource management error vulnerability exists in QTEE in multiple Qualcomm products. The vulnerabili...

How to Secure Critical Infrastructure When Patching Isn't Possible

Cyberattacks are on the rise and threatening our digital life and our most intimate information — but also our operational realities. Attacks on critical infrastructure such as power plants, water works, airports and the like transportation ranks among the highest-value targets for cyberattackers...

CloudBees Jenkins Bumblebee HP ALM Plugin Trust Management Issues Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . Bumblebee HP ALM Plugin is used in one ...

CloudBees Jenkins DeployHub Plugin Trust Management Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . DeployHub Plugin is used in which an...

ncurses buffer overflow vulnerability (CNVD-2020-13676)

ncurses is a character terminal processing library , it can provide a series of functions for the user to call and generate text-based user interface . A buffer overflow vulnerability exists in the 'ncfindentry' function in the tinfo/comphash.c file of the terminfo library in versions prior to...

LZ4 Buffer Overflow Vulnerability

LZ4 is a lossless compression algorithm. A buffer overflow vulnerability exists in the 'LZ4write32' function in versions of LZ4 prior to 1.9.2, which originates when a networked system or product performs an operation in memory without properly validating the data boundaries, resulting in an...

SAP BusinessObjects Business Intelligence Platform Information Disclosure Vulnerability (CNVD-2020-04337)

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. An information disclosure vulnerability exists in SAP BusinessObjects...

Schneider Electric SoMachine HVAC Code Issue Vulnerability

Schneider Electric SoMachine HVAC is a suite of programming software dedicated to Schneider Electric logic controllers from the French company Schneider Electric Schneider Electric. A code issue vulnerability exists in Schneider Electric SoMachine HVAC v2.4.1 and prior versions. The vulnerability...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20162)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.Qualcomm MDM9150 is a central processing unit CPU product.SDX20 is a modem. An input validation error vulnerability exists in Audio in multiple Qualcomm products. The vulnerability...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20149)

The Qualcomm MDM9650 and others are a central processing unit CPU product of Qualcomm Incorporated USA. An input validation error vulnerability exists in Kernel in multiple Qualcomm products. The vulnerability originates from a networked system or product that does not properly validate input dat...

LibreOffice Path Traversal Vulnerability

LibreOffice is an open source office software suite from The Document Foundation TDF. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. A path traversal vulnerability in LibreOffice versions 6.2 prior to 6.2.7 and 6.3 prior to 6.3.1, whi...

Google Android Touch Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA, and Touch driver is one of the touch drivers. The Touch driver component in Android has an information disclosure vulnerability that originates from a configuration error in a networked system or...

Google Android Touch Driver Information Disclosure Vulnerability (CNVD-2019-34472)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA, and Touch driver is one of the touch drivers. The Touch driver component in Android has an information disclosure vulnerability that originates from a configuration error in a networked system or...

Google Android Information Disclosure Vulnerability (CNVD-2019-37948)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in System in Android version 10. The vulnerability stems from errors such as configuration during operation of a networked system or product. An...

Cdemu libMirage NRG parser code issue vulnerability

Cdemu is a virtual CD/DVD drive for the Linux platform. libMirage is one of the libraries used to access CD-ROM images. A code issue vulnerability exists in the NRG parser of libMirage version 3.2.2 in Cdemu. The vulnerability stems from an improperly designed or implemented code development...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38568)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-30348)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...