1621 matches found
CVE-2019-5616: Undefined Security Weakness
CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser...
CVE-2019-9768: Undefined Security Weakness
Thinkst Canarytokens through commit hash 4e89ee0 2019-03-01 relies on limited variation in size, metadata, and timestamp, which makes it easier for attackers to estimate whether a Word document contains a token...
CVE-2019-9573: Undefined Security Weakness
The WP Human Resource Management plugin before 2.2.6 for WordPress mishandles leave applications...
CVE-2019-9563: Undefined Security Weakness
In BlueMind 3.5.x before 3.5.11 Hotfix 7 and 4.x before 4.0-beta3, the contact application mishandles temporary uploads...
CVE-2019-9191: Undefined Security Weakness
The ETSI Enterprise Transport Security ETS, formerly known as eTLS protocol does not provide per-session forward secrecy...
LPG Gas Company Leaked Details, Aadhaar Numbers of 6.7 Million Indian Customers
Why would someone bother to hack a so-called "ultra-secure encrypted database that is being protected behind 13 feet high and 5 feet thick walls," when one can simply fetch a copy of the same data from other sources. French security researcher Baptiste Robert, who goes by the pseudonym "Elliot...
The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system allows a hacker to inject arbitrary web scripts or HTML code.
The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts or HTML code, there...
CVE-2019-8418: Undefined Security Weakness
SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...
Vulnerability of the Server component: Security: Audit of the Oracle MySQL database management system, allowing a hacker to cause a service failure.
The vulnerability of the Server: Security: Audit component of the Oracle MySQL database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...
CVE-2019-6438: Undefined Security Weakness
SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems...
Rukovoditel Project Management CRM 2.4.1 - lists_id SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Rukovoditel Project Management CRM 2.4.1 - 'listsid' SQL Injection Exploit Author: Mehmet EMIROGLU Vendor Homepage: https://www.rukovoditel.net/ Software Link: https://sourceforge.net/projects/rukovoditel/ Version: 2.4.1 Categor...
CVE-2018-5915: Undefined Security Weakness
Exception in Modem IP stack while processing IPv6 packet in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9607, MDM9640, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 430, SD 712 / SD 710 / SD 670, SD 820, SD 820A, SD 835, SD 845 / SD 850, SDA660,...
CVE-2019-6440: Undefined Security Weakness
Zemana AntiMalware before 3.0.658 Beta mishandles update logic...
CVE-2018-4181: Undefined Security Weakness
In macOS High Sierra before 10.13.5, an issue existed in CUPS. This issue was addressed with improved access restrictions...
Design/Logic Flaw
A security weakness in SAP Financial Consolidation Cube Designer BOBJEADES fixed in versions 8.0, 10.1 may allow an attacker to discover the password hash of an admin user...
CVE-2018-2499
A security weakness in SAP Financial Consolidation Cube Designer BOBJEADES fixed in versions 8.0, 10.1 may allow an attacker to discover the password hash of an admin user...
CVE-2018-2499
A security weakness in SAP Financial Consolidation Cube Designer BOBJEADES fixed in versions 8.0, 10.1 may allow an attacker to discover the password hash of an admin user...
CVE-2018-2499
The CVE-2018-2499 entry concerns SAP Financial Consolidation Cube Designer. A security weakness could allow an attacker to discover the password hash of an admin user. The issue is addressed by fixes in BOBJ_EADES for versions 8.0 and 10.1. No exploitation details are provided beyond this descrip...
CVE-2019-0249: Undefined Security Weakness
Under certain conditions SAP Landscape Management VCM 3.0 allows an attacker to access information which would otherwise be restricted...