4160 matches found
PT-2020-2798 · Sds · Sds
Name of the Vulnerable Software and Affected Versions: sds versions 0.0.0 through 3.2.0 Description: The issue is related to Prototype Pollution, where the library can be tricked into adding or modifying properties of the Object.prototype by abusing the set function located in js/set.js. This is...
CVE-2019-20577
An issue was discovered on Samsung mobile devices with P9.0 Exynos chipsets software. The MALI GPU Driver allows a kernel panic. The Samsung ID is SVE-2019-14372 August 2019...
CVE-2019-20562
An issue was discovered on Samsung mobile devices with P9.0 with TEEGRIS software. There is a buffer overflow in the BIOSUB Trustlet. The Samsung ID is SVE-2019-15264 October 2019...
CVE-2019-20553
An issue was discovered on Samsung mobile devices with P9.0 SM6150, SM8150, SM8150FUSION, exynos7885, exynos9610, and exynos9820 chipsets software. Arbitrary memory read and write operations can occur in RKP. The Samsung ID is SVE-2019-15143 October 2019...
CVE-2019-20536
An issue was discovered on Samsung mobile devices with N7.1, O8.x, and P9.0 released in China software. The Firewall application mishandles the PermissionWhiteLists protection mechanism. The Samsung ID is SVE-2019-14299 November 2019...
PT-2020-10564 · Samsung · Teegris +1
Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with O8.1 and P9.0 with TEEGRIS software Description: The issue is related to type confusion in the FINGERPRINT Trustlet, which can lead to arbitrary code execution. Recommendations: For Samsung mobile devices with O8.1...
PT-2020-19604
Name of the Vulnerable Software and Affected Versions Quantum Ethernet Network module 140NOE771x1 versions 7.0 and prior Quantum processors with integrated Ethernet – 140CPU65xxxxx all versions Premium processors with integrated Ethernet all versions Description A vulnerability exists due to...
OPENSUSE-SU-2020:0365-1 Security update for chromium
This update for chromium to version 80.0.3987.149 fixes the following issues: Chromium was update to 80.0.3987.149 bsc1167090: - CVE-2020-6422: Fixed a use after free in WebGL. - CVE-2020-6424: Fixed a use after free in media. - CVE-2020-6425: Fixed an insufficient policy enforcement in extension...
Aquaforest TIFF Server Arbitrary File Download Vulnerability
Aquaforest TIFF Server is a TIFF Tagged Image File Format server from Aquaforest UK. Aquaforest TIFF Server version 4.0 allows unauthenticated arbitrary file downloads. No details of the vulnerability are provided at this time...
Aquaforest TIFF Server Information Disclosure Vulnerability
Aquaforest TIFF Server is a TIFF Tagged Image File Format server from Aquaforest UK. An information disclosure vulnerability exists in Aquaforest TIFF Server version 4.0. The vulnerability stems from an error in configuration or other errors in the operation of a networked system or product. An...
libvirt Denial of Service Vulnerability (CNVD-2020-20734)
Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A security vulnerability exists in the qemu/qemudriver.c file...
CVE-2020-10674
PerlSpeak through 2.01 allows attackers to execute arbitrary OS commands, as demonstrated by use of system and 2-argument open...
UBUNTU-CVE-2019-19210
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files...
Shanghai Yiso Network Technology Co., Ltd. ShopsN open source mall system v3.0.0 aj*** function there are SQL injection vulnerabilities
ShopsN open source mall system is a product of Shanghai Yisu Network Technology Co. Ltd. ShopsN open source mall system v3.0.0 aj function there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...
SQL Injection Vulnerability in CloudYou CMS Ma***.php File
CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. CloudUnion CMS Ma.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain database sensitive information...
Johnson Controls Kantech EntraPass Input Validation Error Vulnerability
Johnson Controls Kantech EntraPass is a menu-driven security management system from Johnson Controls, Inc. An input validation error vulnerability exists in the SmartService API Service option in Johnson Controls Kantech EntraPass Corporate Edition 8.0 and earlier and Kantech EntraPass Global...
Google Chrome Information Disclosure Vulnerability (CNVD-2020-14821)
Google Chrome is a web browser from Google, an American company. An information disclosure vulnerability exists in Google Chrome versions prior to 3.0, which stems from the program's failure to properly process XML documents. A remote attacker could exploit the vulnerability to obtain sensitive...
IBM Security Identity Manager Trust Management Issues Vulnerability
IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...
