SHEKAR Technology Endoscope License Issue Vulnerability

SHEKAR Technology Endoscope is a portable endoscopic device from SHEKAR Technology, China. An authorization issue vulnerability exists in SHEKAR Technology Endoscope. The vulnerability arises from a lack of authentication measures or insufficient authentication strength in a networked system or...

IBM Cognos Controller Information Disclosure Vulnerability (CNVD-2019-18844)

IBM Cognos Controller is a suite of business intelligence and planning solutions from IBM in the United States. The product features process automation, financial audit control, and the creation and management of financial reports. An information disclosure vulnerability exists in IBM Cognos...

NVIDIA Vibrante Linux Input Validation Error Vulnerability

NVIDIA Vibrante Linux is a suite of Linux distributions for Drive PX2 Open AI Vehicle Computing Platform from NVIDIA. An input validation error vulnerability exists in NVIDIA Vibrante Linux. The vulnerability stems from a failure of a networked system or product to properly validate incoming data...

GOG Galaxy Privilege Permission and Access Control Issues Vulnerability

GOG Galaxy is a game client program. The program is used to install, launch and update games. A vulnerability exists in GOG Galaxy for privilege permission and access control issues. The vulnerability stems from a lack of effective privilege permission and access control measures on a networked...

Linux kernel code issue vulnerability (CNVD-2019-39687)

Linux kernel is the kernel used by Linux, an open source operating system released by the Linux Foundation in the United States. freescale hypervisor manager is one of the freescale virtual machine managers. A code issue vulnerability exists in the implementation of freescale hypervisor manager i...

Multiple Qualcomm Products Resource Management Error Vulnerability (CNVD-2019-16543)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.MDM9206 is a central processing unit CPU product.MDM9607 is a central processing unit CPU product.MDM9640 is a central processing unit CPU product. A resource management error vulnerability exists in multiple Qualcomm products. The...

Microsoft .NET Framework and .NET Core Denial of Service Vulnerability (CNVD-2020-62336)

Microsoft .NET Core and Microsoft .NET Framework are both products of the U.S.-based Microsoft Corporation Microsoft. NET Core is a free and open source development platform. NET Core is a free, open source development platform that features multi-language support and cross-platform...

Intel Quartus Software Privilege License and Access Control Issues Vulnerability

Intel Quartus Software is a suite of software for hardware programming from the American company Intel Intel. A vulnerability exists in Intel Quartus Software due to a privilege license and access control issue. The vulnerability arises from a lack of effective privilege permission and access...

Intel i915 Graphics Kernel Mode Driver Input Validation Error Vulnerability

Intel i915 Graphics is a set of graphics card drivers from Intel Corporation.Kernel Mode Driver is one of the kernel mode drivers. An input validation error vulnerability exists in the Intel i915 Graphics Kernel Mode Driver. The vulnerability arises from a networked system or product that does no...

Information Disclosure Vulnerability in Multiple Intel Products (CNVD-2019-22232)

Intel Xeon Scalable Processors are products of Intel Corporation.Intel Xeon Scalable Processors is a scalable server central processing unit CPU.Intel Xeon Processor E7 v4 Family is a Xeon E7 series server central processing unit CPU.Intel Xeon Processor E5 v4 Family is a Xeon E5 series server...

MiniUPnP MiniUPnPd Denial of Service Vulnerability

MiniUPnP is a UPnP tool that can be used for embedded systems. MiniUPnP A denial of service detail exists in MiniUPnPd. The vulnerability stems from improper design or implementation during code development of a networked system or product. An attacker can exploit the vulnerability to launch a...

H.264 decoder buffer overflow vulnerability in multiple Qualcomm products

The Qualcomm MDM9650 and others are a central processing unit CPU product of Qualcomm Incorporated USA. A buffer overflow vulnerability exists in the H.264 decoder in multiple Qualcomm products, which arises when a networked system or product performs an operation in memory without properly...

Arbitrary Code Execution

Kerberos is a networked authentication system which allows clients and servers to authenticate to each other with the help of a trusted third party, the Kerberos KDC. The following security issues are fixed with this release: A use-after-free flaw was found in the way the MIT Kerberos libgssapikr...

Sony Smart TVs Information Disclosure Vulnerability

Sony Smart Tvs are smart TV products from Sony Japan. A log information disclosure vulnerability exists in Sony Smart Tvs. The vulnerability originates from the abnormal output of log files from a networked system or product. An attacker could exploit this vulnerability to obtain sensitive...

Fujifilm CR-IR 357 FCR Carbon X, FCR XC-2 and FCR Capsula X Input Validation Error Vulnerability

The Fujifilm CR-IR 357 FCR Carbon X, among others, is a radiological medical image reading device from Fujifilm, Japan. An input validation error vulnerability exists in Fujifilm CR-IR 357 FCR Carbon X, FCR XC-2, and FCR Capsula X. The vulnerability, which arises from a networked system or produc...

OpenPLC Buffer Overflow Vulnerability

OpenPLC is an open source programmable logic controller. A buffer overflow vulnerability exists in OpenPLCv2 version and OpenPLCv3 version. The vulnerability originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an...

Artifex Software MuJS Resource Management Error Vulnerability

Artifex Software MuJS is a lightweight JavaScript interpreter from Artifex Software, USA, which is used to embed into other software to provide script execution capabilities. A resource management error vulnerability exists in Artifex Software MuJS version 1.0.5. The vulnerability stems from...

Avast Anti-Virus Trust Management Vulnerability

Avast Anti-Virus is a tool for cleaning Avast antivirus programs. A trust management vulnerability exists in Avast Anti-Virus versions prior to 19.1.2360 that stems from the lack of an effective trust management mechanism in a networked system or product. An attacker can exploit default passwords...

IBM Business Automation Workflow and IBM Business Process Manager Information Disclosure Vulnerability

IBM Business Process Manager BPM and IBM Business Automation Workflow are both products of IBM Corporation, U.S.A. IBM Business Process Manager is a comprehensive business process management platform. The platform provides a series of related tools for business process modeling, assembly,...

SAP Crystal Reports for Visual Studio Information Disclosure Vulnerability

SAP Crystal Reports for Visual Studio is the German SAP SAP company's set of Crystal report design software for Visual Studio development platform. An information disclosure vulnerability exists in SAP Crystal Reports for Visual Studio, which arises from errors such as configuration during...