SAP HANA Extended Application Services Credential Access

The vulnerability of the SAP HANA Extended Application Services development tool lies in the process of recording user credentials in a trace file. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information...

Intel Converged Security and

The vulnerability of Intel Converged Security and Manageability Engine and Trusted Execution Engine implementations is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to protected information...

Windows kernel Information Disclosure

The vulnerability of the Windows operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created application...

Cisco NX-OSS Privilege Escalation

The vulnerability of the file system configuration settings in the Cisco NX-OSS network operating system devices relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to protected information...

Moxa EDS IKS Switches Unauthorized Access

The vulnerability of Microprogrammed Software in Moxa EDS and IKS switches stems from the lack of encryption measures for protected data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Intel ARM Speculative Read Disclosure

The vulnerabilities of Intel and ARM processors are related to the use of speculative read operations for system registers. Exploiting these vulnerabilities can allow attackers to disclose system parameters through a specially crafted application...

CVE-2019-7161

An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data...

Information disclosure

An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data...

CVE-2019-7161

An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to protect information, giving the capacity for an attacker to decipher any protected data...

D-Link Router Authentication Bypass

The vulnerability of D-Link router microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

OpenSSL SSL_shutdown Disclosure

The vulnerability of the SSLshutdown function in the OpenSSL cryptographic security suite is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose the protected information...

Microsoft Exchange Server Access Control Privilege Escalation

The vulnerability of Microsoft Exchange Server is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to protected information or modify file access rights...

Huawei HG Router Security Bypass

The vulnerability of Huawei HG router microprogramming software is related to security mechanism errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected data...

Zyxel VMG1312-B10D Path Traversal

The vulnerability of Zyxel VMG1312-B10D router microprogramming software is related to deficiencies in the checking of path names to restricted access directories. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information by using a specially...

Orange Livebo wireless router get_getnetworkconf.cgi Access Information Disclosure

The vulnerability in the getgetnetworkconf.cgi script of the wireless router’s microprogramming system is caused by a error in the management of registration data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to protected information using the HTTP...

ChakraCore JavaScript Disclosure

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in processing service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Golden VM Component XSS

The vulnerability of the Golden VM component in the Juniper ATP intrusion prevention system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript code into the uploaded page and gain access to protected data...

Juniper ATP Zone Configuration XSS

The vulnerability of the Zone configuration component of the Juniper ATP intrusion prevention system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript code into the loaded page and gain access to protected da...

Portal Component Data Modification

The vulnerability of the Portal component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete protected data...

Juniper ATP File Upload XSS

The vulnerability of the file upload menu component in the Juniper ATP intrusion prevention system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to inject arbitrary JavaScript code into the uploaded page and gain access to protected da...