Emlog 跨站脚本漏洞

Emlog is a PHP and MySQL based CMS builder for Emlog personal developers. A cross-site scripting vulnerability exists in emlog version 6.0, which stems from the presence of XSS. no detailed vulnerability details are available at this time...

CVE-2020-25037

UCOPIA Wi-Fi appliances 6.0.5 allow arbitrary code execution with admin user privileges via an escape from a restricted command...

Telmat AccessLog Privilege Vulnerability

Telmat AccessLog is an access log monitoring product from Telmat France. The product protects public and private networks based on access logs. A security vulnerability exists in Telmat AccessLog 6.0 TAL20180415 and prior versions, which stems from an incorrectly programmed call to an advanced...

CVE-2020-17465

Dashboards and progressiveProfileForms in ForgeRock Identity Manager before 7.0.0 are vulnerable to stored XSS. The vulnerability affects versions 6.5.0.4, 6.0.0.6...

Binary vulnerability in Windows rndis 6.0 driver (CNVD-2020-56099)

rndis is the remote network driver interface protocol for W10 systems. A binary vulnerability exists in the Windows rndis 6.0 driver, which can be exploited by attackers to cause a denial of service...

CVE-2019-17339

The VirtualRouter component of TIBCO Software Inc.'s TIBCO Silver Fabric contains a vulnerability that theoretically allows an attacker to inject scripts via URLs. The attacker could theoretically social engineer an authenticated user into submitting the URL, thus executing the script on the...

CVE-2020-14699

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.44, prior to 6.0.24 and prior to 6.1.12. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Orac...

Ruby on Rails Code Issue Vulnerability (CNVD-2020-40605)

Ruby on Rails is a set of Rails team based on the Ruby language open source Web application framework. A security vulnerability exists in Ruby on Rails 6.0.3 and earlier versions. An attacker can exploit the vulnerability to obtain information...

HCL Technologies Connections Open Redirect Vulnerability

HCL Technologies Connections is a suite of enterprise collaboration platforms from HCL Technologies India. An open redirection vulnerability exists in HCL Technologies Connections versions 5.5, 6.0 and 6.5, which arises from a network system or product that does not properly validate incoming dat...

unzip: overlapping of files in ZIP container leads to denial of service

Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service resource consumption, aka a "better zip bomb" issue...

UBUNTU-CVE-2020-1774

When user downloads PGP or S/MIME keys/certificates, exported file has same name for private and public keys. Therefore it's possible to mix them and to send private key to the third-party instead of public key. This issue affects OTRS Community Edition: 5.0.42 and prior versions, 6.0.27 and prio...

HCL Technologies Connections Information Disclosure Vulnerability

HCL Technologies Connections is a suite of enterprise collaboration platforms from HCL Technologies India. A security vulnerability exists in HCL Technologies Connections version 6.5, 6.0 and 5.5. The vulnerability can be exploited by an attacker to gain access to sensitive information...

Unspecified Vulnerability in ABB System 800xA Information Manager

ABB System 800xA Information Manager is an information management system from ABB Switzerland. The system supports access to real-time and historical information for all applications in the automation system, among other things. A security vulnerability exists in ABB System 800xA Information...

UBUNTU-CVE-2020-2914

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-4601

IBM Quality Manager RQM 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain sensitive information from a stack trace that could aid in further attacks against the system...

CVE-2017-18679

An issue was discovered on Samsung mobile devices with M6.0 software. SLocation can cause a system crash via a call to an API that is not implemented. The Samsung ID is SVE-2017-8285 April 2017...

apiconnect-cli-plugins Command Injection Vulnerability

apiconnect-cli-plugins is a development kit plugin for IBM API Connect. An injection vulnerability exists in apiconnect-cli-plugins version 6.0.1 and earlier. An attacker can exploit this vulnerability to execute arbitrary commands with the help of the 'pluginUri' parameter...

libvirt Denial of Service Vulnerability (CNVD-2020-20734)

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A security vulnerability exists in the qemu/qemudriver.c file...

DEBIAN-CVE-2020-1767

Agent A is able to save a draft i.e. for customer reply. Then Agent B can open the draft, change the text completely and send it in the name of Agent A. For the customer it will not be visible that the message was sent by another agent. This issue affects: OTRS Community Edition 6.0.x version...

CVE-2019-19707

On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices with firmware through 6.0, denial of service can occur via PROFINET DCE-RPC endpoint discovery packets...