Arbitrary File Read Vulnerability in Jinweixin Immunization Planning Information Management System

The Immunization Planning Information Management System IPIMS is used to process immunization planning information. An arbitrary file read vulnerability exists in the Jinweixin Immunization Planning Information Management System. An attacker could exploit this vulnerability to obtain sensitive...

HPE UIoT Information Disclosure Vulnerability

HPE UIoT is a suite of universal IoT platforms from Hewlett Packard Enterprise HPE in the United States. The platform features data analytics, monetary safety and synchronization management. A security vulnerability exists in HPE UIoT. An attacker could exploit the vulnerability to gain...

Palo Alto Networks PAN-OS Information Disclosure Vulnerability (CNVD-2019-23068)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An information disclosure vulnerability exists in Palo Alto Networks PAN-OS. to The vulnerability originates from an error in configuration or other errors in the operation of the network...

PT-2019-10020 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM QRadar SIEM versions 7.2 through 7.3 Description: The issue discloses sensitive information to unauthorized users, which can be used to mount further attacks on the system. Recommendations: For versions 7.2 and 7.3, update to a version th...

IBM QRadar SIEM Information Disclosure Vulnerability (CNVD-2019-23968)

IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An information...

CVE-2018-1968

IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 153749...

Sensitive Data Exposure in parse-server

Versions of parse-server prior to 3.6.0 could allow an account enumeration attack via account linking. ParseError.ACCOUNTALREADYLINKED208 was thrown BEFORE the AuthController checks the password and throws a ParseError.SESSIONMISSING206 for Insufficient auth. An attacker can guess ids and get...

GHSA-8W3J-G983-8JH5 Sensitive Data Exposure in parse-server

Versions of parse-server prior to 3.6.0 could allow an account enumeration attack via account linking. ParseError.ACCOUNTALREADYLINKED208 was thrown BEFORE the AuthController checks the password and throws a ParseError.SESSIONMISSING206 for Insufficient auth. An attacker can guess ids and get...

Mozilla Firefox Information Disclosure Vulnerability (CNVD-2019-22627)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. Mozilla Firefox suffers from an information disclosure vulnerability that can be...

SQL Injection Vulnerability in Normandy Technology Website Building System

Zhongshan Normandy Information Technology Co., Ltd. is a service organization that provides network informatization for enterprises and institutions. Normandy Technology website building system has SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in...

USN-4049-1 glib2.0 vulnerability

It was discovered that GLib created directories and files without properly restricting permissions. An attacker could possibly use this issue to access sensitive information...

SQL Injection Vulnerability in the Website Building System of Beijing Transcend Infinite Information Technology Co.

Beijing Beyond Infinity Information Technology is a company engaged in website construction. A SQL injection vulnerability exists in the website building system of Beijing Beyond Unlimited Information Technology Co. Attackers can utilize the vulnerability to obtain sensitive information of the...

SQL Injection Vulnerability in the Report Query System of Health Management Center

Beijing Standardsoft Information Technology Co., Ltd. is a professional medical checkup software provider, focusing on creating highly intelligent medical checkup management software. Health management center report query system has sql injection vulnerability, attackers can use the vulnerability...

Arbitrary File Read Vulnerability in Zhiyuan OA-A8 System

Zhiyuan OA-A8 system is an office system developed by Beijing Zhiyuan Xiechuang Software Co. Zhiyuan OA-A8 system has an arbitrary file read vulnerability, which can be exploited by attackers to obtain sensitive information...

Information leakage vulnerability in VTS management system

Shenzhen Yingzhijie Network Technology Co., Ltd. is a subsidiary of Intex Group, which is committed to providing valuable product services for enterprises. Information leakage vulnerability exists in VTS management system. Attackers can utilize the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Purple File Management System

Purple Software Systems Ltd. is a software services and systems integration provider. A SQL injection vulnerability exists in the Purple File Management System, which can be exploited by attackers to obtain sensitive information from the database...

Design/Logic Flaw

IBM Security Access Manager 9.0.1 through 9.0.6 could reveal highly sensitive in specialized conditions to a local user which could be used in further attacks against the system. IBM X-Force ID: 158400...

Adobe Campaign Classic Information Disclosure Vulnerability (CNVD-2019-18621)

Adobe Campaign Classic ACC is a suite of cross-channel customer experience marketing platforms from the American company Audobee Adobe. The platform features real-time interaction management, Adobe Experience Cloud integration, data management and integration. An information disclosure...

Python Information Disclosure Vulnerability (CNVD-2019-17319)

Python is an open source, object-oriented programming language from the Python Software Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. An information disclosure vulnerability exists in Python. The vulnerability stems from errors such as...

Magic Point Access Control and Time Attendance has an override access vulnerability

Hangzhou Magic Point Technology Co., Ltd. is a technology-based enterprise combining artificial intelligence technology and industry applications, focusing on face recognition technology scenario-based applications and solutions. Magic Point Access Control Attendance has an override access...