ASB-A-153993591

In showLimitedSimFunctionWarningNotification of NotificationMgr.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

ASB-A-155092443

In getNotificationBuilder of CarrierServiceStateTracker.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

PT-2020-5498

Name of the Vulnerable Software and Affected Versions Django versions 2.2 through 2.2.15 Django versions 3.0 through 3.0.9 Django versions 3.1 through 3.1.0 Description The issue is related to incorrect default permission settings in the Django web application platform. This could allow a remote...

The vulnerability of Microsoft Word’s text editor, related to errors in memory object handling, allows attackers to exploit this to disclose protected information.

The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the software...

The vulnerability lies in the implementation of the automatic update method for server names in the Dynamic DNS (DDNS) system. This DNS server BIND allows attackers to gain unauthorized access to protected information.

The vulnerability of the implementation of the automatic update method for server domain names in Dynamic DNS DDNS BIND systems is related to improper authorization. Exploiting this vulnerability can allow an unauthorized attacker to gain unauthorized access to protected information...

Protected: TBD

This content is password protected. To view it please enter your password below: Password:...

Vulnerability in the implementation of ARM operating systems for Windows, allowing a intruder to gain unauthorized access to protected information

The vulnerability in ARM-based Windows operating system implementations is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Windows Image Acquisition service in Windows operating systems allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Windows Image Acquisition service in Windows operating systems is related to errors in processing objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

KITT-Lite

This is a Python-based pentesting CLI tool. The tool is designed to extract WPS Wi-Fi Protected Setup pins from vulnerable routers. It uses various tools such as Piexiewps, Reaver, Bully, Aircrack Suite, and Wash in an automated way to achieve its goal. The tool is likely used for penetration...

The vulnerability of the NSS libraries, which rely on the use of the ECDSA (Elliptic Curve Digital Signature Algorithm) cryptographic algorithm, contains flaws that allow attackers to gain unauthorized access to protected information.

The vulnerability of the NSS libraries is related to the use of the ECDSA Elliptic Curve Digital Signature Algorithm cryptographic algorithm, which has vulnerabilities. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the modular inversion function of the NSS libraries allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the modular inversion function in Network Security Services libraries is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

CVE-2020-7583

A vulnerability has been identified in Automation License Manager 5 All versions, Automation License Manager 6 All versions V6.0.8. The application does not properly validate the users' privileges when executing some operations, which could allow a user with low permissions to arbitrary modify...

The vulnerability of the macOS operating system, related to the lack of protection for service data, allows attackers to disclose protected information.

The vulnerability of the macOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Libraries component of Oracle Java SE and Oracle Java SE Embedded software platforms allows attackers to compromise the integrity, confidentiality, and accessibility of protected information.

The vulnerability of the Libraries component in Oracle Java SE and Oracle Java SE Embedded software platforms is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity, confidentiality, and accessibility of protected...

The vulnerability of Platform and Mobile App components, which are used for automating project management processes, in Oracle Primavera Unifier allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Platform and Mobile App components of Oracle Primavera Unifier relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the HTTPS protocol...

The vulnerability of the Inventory Integration component of the Oracle Hospitality Reporting and Analytics software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Inventory Integration component of the Oracle Hospitality Reporting and Analytics software is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to deficiencies in access control. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the PAN-OS operating system, related to the unsafe use of temporary files, allows a perpetrator to compromise the integrity of protected information.

The vulnerability of the PAN-OS operating system is related to the unsafe use of temporary files. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information...

The vulnerability of the Core server component of Oracle WebLogic Server allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Oracle WebLogic Server application server’s Core component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

The vulnerability of the Reporting component of the Oracle Hospitality Reporting and Analytics application allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Reporting component of the Oracle Hospitality Reporting and Analytics application is related to lack of access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information using the HTTP...