CVE-2022-29789: Undefined Security Weakness

The HiAIserver has a vulnerability in verifying the validity of the properties used in the model.Successful exploitation of this vulnerability will affect AI services...

CVE-2022-20120: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-203213034References: N/A...

CVE-2021-4138: Undefined Security Weakness

Improved Host header checks to reject requests not sent to a well-known local hostname or IP, or the server-specified hostname...

CVE-2019-25059: Undefined Security Weakness

Artifex Ghostscript through 9.26 mishandles .completefont. NOTE: this issue exists because of an incomplete fix for CVE-2019-3839...

CVE-2016-20014: Undefined Security Weakness

In pamtacplus.c in pamtacplus before 1.4.1, pamsmacctmgmt does not zero out the arep data structure...

CVE-2022-1318

Hills ComNav version 3002-19 suffers from a weak communication channel. Traffic across the local network for the configuration pages can be viewed by a malicious actor. The size of certain communications packets are predictable. This would allow an attacker to learn the state of the system if the...

CVE-2022-21498: Undefined Security Weakness

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via multiple protocols to compromise Java VM...

CVE-2022-1155: Undefined Security Weakness

Old sessions are not blocked by the login enable function. in GitHub repository snipe/snipe-it prior to 5.3.10...

CVE-2021-39737: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-208229524References: N/A...

CVE-2021-39716: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-206977562References: N/A...

CVE-2021-39720: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-207433926References: N/A...

CVE-2021-39723: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-209014813References: N/A...

CVE-2021-39710: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-202160245References: N/A...

Microsoft Azure 'AutoWarp' Bug Could Have Let Attackers Access Customers' Accounts

Details have been disclosed about a now-addressed critical vulnerability in Microsoft's Azure Automation service that could have permitted unauthorized access to other Azure customer accounts and take over control. "This attack could mean full control over resources and data belonging to the...

CVE-2022-24334: Undefined Security Weakness

In JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private key on the server...

Security Bulletin: IBM PowerVM Novalink is vulnerable to provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications.

Summary IBM PowerVM Novalink, which consumes IBM WebSphere Application Server Liberty 21.0.0.10 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications. IBM strongly recommends...

Security Bulletin: Potential WebSphere Application Server weakness in security affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) (CVE-2018-1996)

Summary There is a potential for weaker than expected security in WebSphere Application Server which affects IBM Spectrum Control formerly Tivoli Storage Productivity Center. Vulnerability Details CVEID: CVE-2018-1996 DESCRIPTION: IBM WebSphere Application Server could provide weaker than expecte...

CVE-2022-23848: Undefined Security Weakness

In Alluxio before 2.7.3, the logserver does not validate the input stream. NOTE: this is not the same as the CVE-2021-44228 Log4j vulnerability...

CVE-2022-25319: Undefined Security Weakness

An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled...

H3C SSL VPN - Username Enumeration

Exploit Title: H3C SSL VPN - Username Enumeration Exploit Author: LiquidWorm H3C SSL VPN Username Enumeration Vendor: Hangzhou H3C Technologies Co. | New H3C Technologies Co., Ltd. Product web page: https://www.h3c.com Affected version: n/a Summary: H3C SSL VPN is a secure VPN system based on SSL...