75 matches found
Cisco IOX Privilege Escalation
The vulnerability of the Cisco IOx software platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
CVE-2022-27169
An information disclosure vulnerability exists in the OAS Engine SecureBrowseFile functionality of Open Automation Software OAS Platform V16.00.0112. A specially-crafted network request can lead to a disclosure of sensitive information. An attacker can send a network request to trigger this...
Cambium Networks cnMaestro OS Command Injection Vulnerability (CNVD-2022-64237)
Cambium Networks cnMaestro is a cloud-based or native software platform from Cambium Networks for secure end-to-end network control. Cambium Networks cnMaestro suffers from an operating system command injection vulnerability. An attacker could exploit this vulnerability to upload specially crafte...
CVE-2022-24873
Shopware storefront is affected by a non-stored XSS vulnerability in versions prior to 5.7.9. The issue stems from inadequate input handling in the storefront, enabling script injection via URL parameters. It is fixed in version 5.7.9; mitigation guidance in older versions includes using the Shop...
Jenkins CloudBees AWS Credentials Plugin Cross-Site Request Forgery Vulnerability
Jenkins is a software project, a Java-based continuous integration tool for monitoring continuously recurring work, designed to provide an open and easy-to-use software platform that allows software projects to be continuously integrated. Jenkins CloudBees AWS Credentials Plugin 189.v3551d5642995...
Bentley MicroStation CONNECT Remote Code Execution Vulnerability (CNVD-2022-30767)
A remote code execution vulnerability exists in Bentley MicroStation CONNECT, a Cad software platform for 2D and 3D design and drafting from Bentley Systems, Inc. Lack of proper validation of the length before copying user-supplied data to a heap-based buffer can be exploited by an attacker to...
Bentley MicroStation CONNECT Remote Code Execution Vulnerability (CNVD-2022-30769)
A remote code execution vulnerability exists in Bentley MicroStation CONNECT, a Cad software platform for 2D and 3D design and drafting from Bentley Systems, U.S.A. The vulnerability stems from a lack of verification of the existence of an object before performing operations on it The vulnerabili...
Airspan Networks Mmp Code Issue Vulnerability
Airspan Networks Mmp is an advanced standalone network management software platform for Mimosa fixed wireless devices from Airspan Networks, U.S. Airspan Networks Mmp is vulnerable to a code issue that could be exploited by an attacker to pass specially crafted data to the application and create...
Bentley MicroStation CONNECT Remote Code Execution Vulnerability (CNVD-2022-30768)
A remote code execution vulnerability exists in Bentley MicroStation CONNECT, a Cad software platform for 2D and 3D design and drafting from Bentley Systems, Inc. Lack of proper validation of the length before copying user-supplied data to a heap-based buffer can be exploited by an attacker to...
Moodle Input Validation Error Vulnerability (CNVD-2021-92540)
Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. a security vulnerability exists in Moodle, which stems from a problem when the software restores backup files. an attacker could...
BlackBerry QNX Software Development Platform: Input validation error vulnerability
Blackberry QNX Software Development Platform is a QNX software development platform from Blackberry Canada. The platform is primarily used to develop software based on the QNX platform. An input validation error vulnerability exists in the BlackBerry QNX Software Development Platform. The...
Fedora: Security Advisory for djvulibre (FEDORA-2021-7514c11a37)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora: Security Advisory for djvulibre (FEDORA-2021-d4c1c98a58)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Logic flaws exist in the public search platform of Beijing Chuangxun Future Software Technology Co.
Beijing Chuangxun Future Software Technology Co., Ltd. business scope: technology development, technology transfer, technology consulting, technology services, etc. There is a logic flaw vulnerability in the public search platform of Beijing Chuangxun Future Software Technology Co., Ltd. that can...
Design/Logic Flaw
The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...
CVE-2020-7196: Exposure of Sensitive Information to an Unauthorized Actor
The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized interception and/or retrieval. Specifically, they display the kdcadminpassword in the source file of the u...
PT-2020-19456
Name of the Vulnerable Software and Affected Versions HPE BlueData EPIC Software Platform version 4.0 HPE Ezmeral Container Platform version 5.0 Description The issue concerns an insecure method of handling sensitive Kerberos passwords, making them susceptible to unauthorized interception and/or...
ALSA-2019:2925 Important: nodejs:10 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs 10.16.3. Security Fixes: HTTP/2: large amount of data requests leads to denial of...
PT-2019-19301 · Blackberry · Blackberry Qnx Software Development Platform
Name of the Vulnerable Software and Affected Versions: BlackBerry QNX Software Development Platform versions 6.5.0 SP1 and earlier Description: The issue is related to an information disclosure vulnerability in the procfs service of the BlackBerry QNX Software Development Platform. This...
Cisco RV180W Multi-functional Router Disclosure Information
The vulnerability of the software platform for the Cisco RV180W multi-functional router and the Cisco Small Business RV220W wireless network security gateway lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose...