Google Android Information Disclosure Vulnerability (CNVD-2019-37949)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. System in Android Q suffers from an information disclosure vulnerability. The vulnerability stems from errors such as configuration during operation of a networked system or product. An attacker...

The vulnerability of RDP servers on Windows operating systems, which allows attackers to disclose sensitive information

The vulnerability of RDP servers on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created application...

Google Android Information Disclosure Vulnerability (CNVD-2019-30371)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

Google Android System Information Disclosure Vulnerability (CNVD-2019-31043)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. There is an information disclosure vulnerability in System in Android Q. The vulnerability arises from errors in the configuration of a networked...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2019-38592)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. An information disclosure vulnerability exists in Media framework in Android Q. The vulnerability originates in a...

SQL Injection Vulnerability in We*** Interface of Shared Human Resource Management System

Dongguan City, the same share software technology limited company is a focus on manufacturing, commercial circulation, government departments, enterprises and institutions, such as management software research and development and service company. The We interface of Tongxiang Human Resources...

SQL injection vulnerability in zzcms backend (CNVD-2019-30313)

ZZCMS is a content management system CMS by the ZZCMS team in China. A SQL injection vulnerability exists in the backend of zzcms, which can be exploited by attackers to obtain sensitive information from the database...

Open-Xchange OX App Information Disclosure Vulnerability

Open-Xchange OX App Suite is a set of Web-based cloud desktop environments from Open-Xchange USA. The environment allows users to more intuitively manage email, tasks, files, etc. mail compose is one of the mail editing components. An information disclosure vulnerability exists in Open-Xchange OX...

SQL Injection Vulnerability in TurboECM Content Management System ti*** Page of Jiangsu Tide Technology Co.

Ltd. is a company dedicated to the research and product development of Internet content data management, mining, analysis and application technology. A SQL injection vulnerability exists in the TurboECM content management system ti page of Jiangsu Tide Technology Co. Ltd, which can be exploited b...

X (Formerly Twitter): AppLovin API Key hardcoded in a Github repo

Hello, I found a Sensitive Data Exposure in github/mopub-android-mediation project, the AppLovin UI API key is hardcoded in source code. And in the comment it's mentioned that "This is a unique SDK Key from AppLovin. Get yours from the AppLovin UI". Github Link:-...

Sensitive Data Exposure

Overview Versions of parse-server prior to 3.6.0 are vulnerable to Sensitive Data Exposure. The package throws the error ParseError.ACCOUNTALREADYLINKED208 before the authentication controller throws ParseError.SESSIONMISSING206. This allows unauthenticated attackers to enumerate user account by...

Sensitive Data Exposure

Overview Versions of msrcrypto prior to 1.4.1 are vulnerable to Sensitive Data Exposure. The package's Elliptic Curve Cryptography ECC implementation may leak information about a server's private ECC key. It can also allow attackers to craft invalid ECDSA signatures that pass as valid. There is n...

Ledger SAS Nano S and Nano X Information Disclosure Vulnerability

The Ledger SAS Nano S and Nano X are both an e-wallet device for storing cryptocurrencies from French company Ledger SAS. An information disclosure vulnerability exists in the Ledger SAS Nano S and Nano X, which can be exploited by an unauthorized attacker to obtain sensitive information about...

CloudBees Jenkins Configuration as Code Information Disclosure Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Configuration as Code Plugin is used in which a Jenki...

cPanel Information Disclosure Vulnerability (CNVD-2019-29715)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An information disclosure vulnerability exists in versions prior to cPanel 67.9999.103. The vulnerability stems from an error in...

PT-2019-13694 · Openstack +1 · Openstack Nova +1

Name of the Vulnerable Software and Affected Versions: OpenStack Nova versions prior to 17.0.12 OpenStack Nova versions 18.x prior to 18.2.2 OpenStack Nova versions 19.x prior to 19.0.2 Description: An issue in OpenStack Nova may leak details of the underlying environment in the response to an AP...

SQL Injection Vulnerability in OE***.ashx Page of Nanjing Pintech Medical Online Exam System

Nanjing Pintech medical online examination system enables users to realize the organization and management of online examination work. SQL injection vulnerability exists in the OE.ashx page of Nanjing Pinde Technology Medical Online Examination System, which can be exploited by attackers to obtai...

SQL Injection Vulnerability in the Frontend of Far Autumn Medical Online Exam System v3.8

Far Autumn Medical Online Examination System adopts the universal test bank management software, applicable to all levels and types of medical schools and hospitals, the content contains the three basic exams for medical and nursing personnel, title exams, licensing exams, academic exams, trainin...

SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co.

Inner Mongolia Hohai Trade Co., Ltd. is a professional information technology network service provider that integrates creativity, planning, design and production, and technology development. There is a SQL injection vulnerability in the website system of Inner Mongolia Hohai Trading Co. Attacker...

Arbitrary File Read Vulnerability in Jinweixin Immunization Planning Information Management System

The Immunization Planning Information Management System IPIMS is used to process immunization planning information. An arbitrary file read vulnerability exists in the Jinweixin Immunization Planning Information Management System. An attacker could exploit this vulnerability to obtain sensitive...