EUVD-2016-7580

Malware in sbrugna...

Schneider Electric Trio Q Licensed Data Radio Information Disclosure Vulnerability Vulnerability

The Schneider Electric Trio Q Licensed Data Radio is a radio from Schneider Electric France. The Schneider Electric Trio Q Licensed Data Radio suffers from an information disclosure vulnerability that stems from an insecure initialization of resources, which can be exploited by an attacker to...

Adobe Illustrator Out-of-Bounds Read Vulnerability (CNVD-2025-05687)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Illustrator, which can be exploited by attackers to obtain sensitive information...

JT2Go and Teamcenter Visualization File Parsing Vulnerability (CNVD-2021-100359)

JT2Go, a 3D JT viewing tool, and Teamcenter Visualization software enable companies to enhance their Product Lifecycle Management PLM environments with a comprehensive family of visualization solutions. The software allows business users to access documents, 2D drawings and 3D models in a single...

Unauthorized Access Vulnerability in Samsung (China) Investment Limited SL-M3370FD

SL-M3370FD is a printer from Samsung China Investment Co. An unauthorized access vulnerability exists in the Samsung China Investment Co. SL-M3370FD, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Samsung (China) Investment Company Limited SL-M3870FW

SL-M3870FW is a printer from Samsung China Investment Co. An unauthorized access vulnerability exists in the Samsung China Investment Co. SL-M3870FW, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Samsung (China) Investment Company Limited SL-M4070FR

SL-M4070FR is a printer device from Samsung China Investment Co. An unauthorized access vulnerability exists in the Samsung China Investment Co. SL-M4070FR, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Hikvision DS-2CD2612F-IS

The DS-2CD2612F-IS is a network camera. An unauthorized access vulnerability exists in the Hikvision DS-2CD2612F-IS. An attacker can exploit the vulnerability to obtain sensitive information...

UCMS has a vertical override vulnerability

UCMS is a simple open source content management system. UCMS suffers from a vertical override vulnerability that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in H3C-ER3200 Routers

ER3200 is a high-performance router from H3C, which is mainly targeted at the SMB market with Ethernet/fiber/ADSL access and network environments such as government, enterprise organizations, and Internet cafes. A weak password vulnerability exists in the H3C-ER3200 router, which can be exploited...

CVE-2018-20510

The printbindertransactionilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "from code flags" lines in a debugfs file...

libxml2 2.6.x - XMLWriter::writeAttribute() Memory Leak Information Disclosure

libxml2 2.6.x - XMLWriter::writeAttribute Memory Leak Information Disclosure source: https://www.securityfocus.com/bid/45973/info The 'libxml2' library is prone to a local information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to furth...

Ashley Brown iWeb Server - Encoded Backslash Directory Traversal

Ashley Brown iWeb Server - Encoded Backslash Directory Traversal source: https://www.securityfocus.com/bid/8943/info It has been reported that iWeb Server is prone a directory traversal issue allowing a remote attacker to traverse outside the server root directory by using '..%5C' character...

eStore 1.0.11.0.2 - Settings.inc.php Full Path Disclosure

eStore 1.0.11.0.2 - Settings.inc.php Full Path Disclosure source: https://www.securityfocus.com/bid/8220/info eStore is prone to a path disclosure vulnerability. It has been reported that a remote attacker may make a direct HTTP request for an eStore include script and in doing so trigger an erro...