1703 matches found
CVE-2020-7500
A CWE-89:Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability exists in U.motion Servers and Touch Panels affected versions listed in the security notification which could cause arbitrary code to be executed when a malicious command is entered...
CVE-2020-7499
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels affected versions listed in the security notification which could cause unauthorized access when a low privileged user makes unauthorized changes...
Authorization
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels affected versions listed in the security notification which could cause unauthorized access when a low privileged user makes unauthorized changes...
Sql injection
A CWE-89:Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability exists in U.motion Servers and Touch Panels affected versions listed in the security notification which could cause arbitrary code to be executed when a malicious command is entered...
CVE-2020-7500
A CWE-89:Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability exists in U.motion Servers and Touch Panels affected versions listed in the security notification which could cause arbitrary code to be executed when a malicious command is entered...
CVE-2020-7500
CVE-2020-7500 : A CWE-89 SQL injection exists in U.motion Servers and Touch Panels. The root cause is improper neutralization of special elements used in SQL commands, allowing potential arbitrary code execution when a malicious command is entered. Connected sources corroborate the vulnerability ...
CVE-2020-7500
A CWE-89:Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability exists in U.motion Servers and Touch Panels affected versions listed in the security notification which could cause arbitrary code to be executed when a malicious command is entered...
CVE-2020-7499
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels affected versions listed in the security notification which could cause unauthorized access when a low privileged user makes unauthorized changes...
CVE-2020-7499
CVE-2020-7499: Multiple connected sources confirm a CWE-863 Incorrect Authorization vulnerability in U.motion Servers and Touch Panels. The Red Hat, NVD, and CVE records describe that a low-privileged user could make unauthorized changes leading to unauthorized access. Concrete affected product s...
CVE-2020-7499: Incorrect Authorization
A CWE-863: Incorrect Authorization vulnerability exists in U.motion Servers and Touch Panels affected versions listed in the security notification which could cause unauthorized access when a low privileged user makes unauthorized changes...
CVE-2020-7500: Improper Neutralization of Special Elements used in an SQL Command
A CWE-89:Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability exists in U.motion Servers and Touch Panels affected versions listed in the security notification which could cause arbitrary code to be executed when a malicious command is entered...
Apple Security Update: iOS 13.5.1 and iPadOS 13.5.1
Apple recommends to install security update iOS 13.5.1 and iPadOS 13.5.1 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...
Apple Security Update: iOS 13.5.1 and iPadOS 13.5.1
Apple recommends to install security update iOS 13.5.1 and iPadOS 13.5.1 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...
About the security content of iOS 12.4.7 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
Apple Security Update: iOS 12.4.7 (details available soon)
Apple recommends to install security update iOS 12.4.7 details available soon on devices iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch 6th generation...
Apple Security Update: iOS 13.5 and iPadOS 13.5 (details available soon)
Apple recommends to install security update iOS 13.5 and iPadOS 13.5 details available soon on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...
CVE-2014-1423
signond before 8.57+15.04.20141127.1-0ubuntu1, as used in Ubuntu Touch, did not properly restrict applications from querying oath tokens due to incorrect checks and the missing installation of the signon-apparmor-extension. An attacker could use this create a malicious click app that collects oau...
CVE-2014-1423
signond before 8.57+15.04.20141127.1-0ubuntu1, as used in Ubuntu Touch, did not properly restrict applications from querying oath tokens due to incorrect checks and the missing installation of the signon-apparmor-extension. An attacker could use this create a malicious click app that collects oau...
Information disclosure
signond before 8.57+15.04.20141127.1-0ubuntu1, as used in Ubuntu Touch, did not properly restrict applications from querying oath tokens due to incorrect checks and the missing installation of the signon-apparmor-extension. An attacker could use this create a malicious click app that collects oau...
CVE-2014-1423
CVE-2014-1423 affects signond used in Ubuntu Touch. The vulnerability arises from incorrect checks that allow applications to query OAuth tokens and from not installing the signon-apparmor-extension.Impact: an attacker could craft a malicious click app to collect OAuth tokens from other apps. No ...