CVE-2019-12913

Redbrick Shift through 3.4.3 allows an attacker to extract emails of services such as Gmail, Outlook, etc. used in the application...

CVE-2019-12913

CVE-2019-12913 affects Redbrick Shift up to version 3.4.3. The vulnerability is an information-disclosure issue caused by configuration during operation, enabling an attacker to extract emails of services (e.g., Gmail, Outlook) used by the application. Some connected records reiterate the disclos...

CVE-2019-12912

Redbrick Shift through 3.4.3 allows an attacker to extract emails of services such as Gmail, Outlook, etc. used in the application...

CVE-2019-12912

Redbrick Shift 3.4.3 and earlier versions contain an information-disclosure vulnerability. According to CNVD-2019-38853, the flaw stems from configuration errors during operation of the system and can allow an attacker to obtain sensitive information, specifically emails of services (e.g., Gmail,...

CVE-2019-8931

Redbrick Shift through 3.4.3 allows an attacker to extract emails of services such as Gmail, Outlook, etc. used in the application...

CVE-2019-8931

CVE-2019-8931 concerns Redbrick Shift up to version 3.4.3. The vulnerability enables an attacker to extract emails of external services (e.g., Gmail, Outlook) that are used by the application, indicating an information-disclosure flaw likely related to how credentials or service identifiers are h...

CVE-2019-8932

Redbrick Shift vulnerability CVE-2019-8932 affects Shift 3.4.3 and earlier, allowing an attacker to extract authentication tokens from external services (e.g., Gmail, Outlook) used within the application. The current connected documents confirm affected versions but do not provide root-cause deta...

CVE-2019-8932

Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services such as Gmail, Outlook, etc. used in the application...

CVE-2019-12914

Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services such as Gmail, Outlook, etc. used in the application...

CVE-2019-12914

Redbrick Shift up to version 3.4.3 has an information-disclosure vulnerability that lets an attacker extract authentication tokens for services used by the application (e.g., Gmail, Outlook). The issue is described as arising from configuration-related errors during operation in Shift 3.4.3 and e...

CVE-2019-12911

Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services such as Gmail, Outlook, etc. used in the application...

CVE-2019-12911

The CVE-2019-12911 entry concerns Redbrick Shift (3.4.3 and prior). The vulnerability allows an attacker to extract authentication tokens from services (e.g., Gmail, Outlook) used by the application. The connected Red Hat, CNVD, and CVE records echo the same impact, indicating token exposure thro...

Redbrick Technologies Shift Information Disclosure Vulnerability

Redbrick Technologies Shift is a suite of application platforms from Redbrick Technologies, a Canadian company. The platform supports managed access to email, chat programs, network storage, and more. An information disclosure vulnerability exists in Redbrick Technologies Shift version 3.4.3 and...

The vulnerability of the opj_j2k_setup_encoder function in the OpenJPEG image encoding and decoding library, related to integer overflow caused by left shift operations, allows attackers to cause service failures.

The vulnerability of the opjj2ksetupencoder function in the OpenJPEG image encoding and decoding library is related to a numerical overflow caused by a left shift operation. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created BMP file...

CVE-2018-20788

drivers/leds/leds-aw2023.c in the led driver for custom Linux kernels on the Xiaomi Redmi 6pro daisy-o-oss phone has several integer overflows because of a left-shifting operation when the right-hand operand can be equal to or greater than the integer length. This can be exploited by a crafted...

DEBIAN-CVE-2019-6245

An issue was discovered in Anti-Grain Geometry AGG 2.4 as used in SVG++ aka svgpp 1.2.3. In the function agg::cellaa::notequal, dx is assigned to x2 - x1. If dx = dxlimit, which is 16384 polysubpixelshift, this function will call itself recursively. There can be a situation where x2 - x1 is alway...

The vulnerability of the ihevcd_sao_shift_ctb function in the Android operating system allows a hacker to disclose protected information.

The vulnerability of the ihevcdsaoshiftctb function ihevcdsao.c in the Android operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Adrenalin HRMS Software Cross-Site Scripting Vulnerability (CNVD-2018-26800)

Adrenalin HRMS Software is a human resource management system from Adrenalin eSystems India. A cross-site scripting vulnerability exists in Adrenalin HRMS Software version 5.4.0, which can be exploited by a remote attacker to execute JavaScript code by sending the 'prntFrmName' or '...

CVE-2018-12651

A Reflected Cross Site Scripting XSS Vulnerability was discovered in Adrenalin 5.4 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the ShiftEmployeeSearch.aspx prntFrmName or prntDDLCntrlName parameter...

Data Privacy Issues Trigger Soul Searching in Tech Industry

NEW YORK – For the tech industry, Facebook’s Cambridge Analytica scandal has led to a wave of self-examination when it comes to the culture around data collection and utilization – and what the price is for bad data privacy policies. While regulatory efforts, fines and consumer public sentiment...