383 matches found
Information Disclosure Vulnerability in Advanced Threat Hunting and Traceability System
Advanced Threat Hunting and Traceability System is an advanced threat hunting and traceability system based on deception defense with an information leakage vulnerability that can be exploited by attackers to obtain sensitive information...
KLA12024 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerabili...
Information Leakage Vulnerability in Numtech Mobile Campus WEB System
Ltd. is a development service provider dedicated to smart campus, and its main products include Moe School, Fusion Media Platform, Communication Platform, and so on. An information leakage vulnerability exists in the WEB system of Numtech Mobile Campus. Attackers can use the vulnerability to obta...
KLA12017 Mulitple vulnerabilities in Apple iCloud
Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in...
Information Disclosure
frr is vulnerable to information disclosure. An insecure default permission issue allows an attacker to obtain confidential information via tools/frr.in and tools/frrcommon.sh.in...
CVE-2020-26939
In Legion of the Bouncy Castle BC before 1.61 and BC-FJA before 1.0.1.2, attackers can obtain sensitive information about a private exponent because of Observable Differences in Behavior to Error Inputs. This occurs in org.bouncycastle.crypto.encodings.OAEPEncoding. Sending invalid ciphertext tha...
Ubuntu: Security Advisory (USN-4566-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-19672
Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, getshell...
Xiaomi MIUI Information Disclosure Vulnerability
Xiaomi MIUI is a set of Android-based smartphone operating systems developed by China's Xiaomi Technology Xiaomi. An information disclosure vulnerability exists in Xiaomi MIUI version 11.0.5.0.QFAEUXM. The vulnerability can be exploited by an attacker with an NFC tool to install an application an...
IBM Security Guardium Data Encryption (GDE) Information Disclosure Vulnerability (CNVD-2020-49510)
IBM Security Guardium Data Encryption GDE provides a modular set of encryption solutions that help security teams effectively implement data-at-rest security across the organization. An information disclosure vulnerability exists in IBM Security Guardium Data Encryption GDE 3.0.0.2. An attacker...
KLA11941 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilitie...
Information disclosure
FusionCompute 8.0.0 has an information disclosure vulnerability. Due to the properly protection of certain information, attackers may exploit this vulnerability to obtain certain information...
Adobe Acrobat/Reader Out-of-Bounds Read Vulnerability (CNVD-2020-46039)
Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe.Adobe Acrobat is a PDF editing software developed by Adobe. Adobe Acrobat/Reader has an out-of-bounds read vulnerability that can be exploited by attackers to obtain information...
KLA11858 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Skype for Business via Microsoft Edge...
Unauthorized Access Vulnerability in the National Student Management Information System for Secondary Vocational Schools
National Secondary Vocational School Student Management Information System is a student information management system. An unauthorized access vulnerability exists in the National Secondary Vocational School Student Management Information System, which can be exploited by an attacker to obtain use...
Google Android Media Framework Information Disclosure Vulnerability (CNVD-2020-46283)
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. The Google Android Media Framework information disclosure vulnerability can be exploited by attackers to obtain sensitiv...
KLA11787 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, execute arbitrary code, bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilitie...
Unauthorized Access Vulnerability in YouCloud Full Stack Ops Platform
YouCloud Full Stack O&M Platform provides full-stack agile O&M products such as large-scale monitoring, network monitoring, application performance monitoring, APM, CMDB configuration management repository, and operation automation. Unauthorized access vulnerability exists in UCloud Full Stack O&...
Ignite Realtime Spark Information Disclosure Vulnerability
Ignite Realtime Spark is an open source, cross-platform, real-time collaboration client application from the Ignite Realtime community. An information disclosure vulnerability exists in Ignite Realtime Spark version 2.8.3 Windows. A remote attacker can exploit this vulnerability to obtain and cra...
