Cisco Remote Expert Manager Temporary File Information Disclosure Vulnerability

Cisco Remote Expert Manager Software is the United States Cisco Cisco a remote management software. The software remote screen sharing, screen annotation and session recording and other collaborative functions. Cisco Remote Expert Manager Software has a temporary file information disclosure...

SQL Injection Vulnerability in 'menu_id' Parameter of Pioneer Hi-Tech Government System

Pioneer Hi-Tech Government System is an "easy technology" system. A SQL injection vulnerability exists in the 'menuid' parameter of the Pilot Hi-Tech Government System. This vulnerability can be exploited by attackers to obtain sensitive information from the database...

IBM Tealeaf Customer Experience Local Information Disclosure Vulnerability

IBM Tealeaf CX is a customer experience analysis software. A local information disclosure vulnerability exists in IBM Tealeaf Customer Experience. An attacker could exploit this vulnerability to obtain sensitive information...

Directory Traversal

pooledwebsocket is vulnerable to directory traversal attacks. Attackers can access sensitive data and files on a server by requesting URLs such as /..%2f..%2fetc/passwd...

PT-2017-1797

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions 2.04.0.45D through 3.20.0 Cisco Evolved Programmable Network EPN Manager versions 2.04.0.45D through 3.20.0 Description A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved...

PT-2017-16644

Name of the Vulnerable Software and Affected Versions Apache Geode versions prior to 1.1.1 Description The issue allows remote authenticated users with limited permissions to access sensitive data. Specifically, users with CLUSTER:READ but not DATA:READ permission can access the data browser page...

F5 Networks BIG-IP : MCPD vulnerability (K52180214)

In some cases, the MCPD binary cache may allow a user with Advanced Shell access to temporarily obtain normally unrecoverable information. CVE-2016-7474 Impact A local user may have access to sensitive data such as passwords for recently created local user accounts and passphrases that have been...

CVE-2017-0334

An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions:...

CVE-2017-0494: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions:...

CVE-2017-0334: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions:...

CVE-2017-0529: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/...

SQL Injection Vulnerability in Love Lover Matters Management System v4.0

LOVE LOVE Personnel Management System is a personnel management system for small and medium-sized enterprises as well as micro-enterprises. The system suffers from a SQL injection vulnerability in the login area. The program fails to perform strict filtering on the username variable, allowing an...

SQL Injection Vulnerability in 'name' Parameter of Single Point CRM System

Single point CRM system is a single point of technology development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies , fixed...

CVE-2016-7664

An issue was discovered in certain Apple products. iOS before 10.2 is affected. The issue involves the "Accessibility" component. which allows physically proximate attackers to obtain sensitive photo and contact information by leveraging the availability of excessive options during lockscreen...

Cisco Intrusion Prevention System Device Manager Information Leakage Vulnerability

Cisco Intrusion Prevention System is an intrusion prevention system. A remote information leakage vulnerability exists in Cisco Intrusion Prevention System Device Manager. An attacker could exploit this vulnerability to obtain sensitive information and launch further attacks...

Google Android AOSP Mail Information Disclosure Vulnerability (CNVD-2017-01556)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in Google Android AOSP Mail. Attackers use this vulnerability to obtain sensitive information and launch further attacks...

OpenSSL Information Disclosure Vulnerability (CNVD-2017-01531)

OpenSSL is an open source capable of implementing the Secure Sockets Layer SSL v2/v3 and Secure Transport Layer TLS v1 protocols developed by the OpenSSL team as a general-purpose cryptographic library that supports a wide range of cryptographic algorithms including symmetric ciphers, hash...

Jenkins Information Disclosure Vulnerability (CNVD-2017-01369)

CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . An...

CVE-2017-0426: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the Filesystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 7.0, 7.1.1. Andro...

Information disclosure

An information disclosure vulnerability in Audioserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1,...