CVE-2020-2578

Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMB to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris,...

DOMPDF Information Disclosure Vulnerability

DOMPDF is a converter to convert HTML to PDF. An information disclosure vulnerability exists in versions of DOMPDF prior to 0.6.2. The vulnerability stems from a configuration or other error in the operation of a networked system or product. An unauthorized attacker could exploit the vulnerabilit...

WordPress WP SlackSync Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WP SlackSync is an online chat plugin used in it. An information disclosure vulnerability exists in WordPress WP...

Design/Logic Flaw

SAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed connection request, which crashes the indexserver of an SAP HANA instance, leading to Denial of Service...

CVE-2019-0350

SAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed connection request, which crashes the indexserver of an SAP HANA instance, leading to Denial of Service...

Authentication Bypass Vulnerability in Triconex SIS System

The Triconex SIS system is a modern programmable logic and process controller. An authentication bypass vulnerability exists in the Triconex SIS system, which could be exploited by an unauthorized attacker to gain access to the controller...

Google Android Information Disclosure Vulnerability (CNVD-2019-30366)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. System in Android Q suffers from an information disclosure vulnerability. The vulnerability stems from errors such as configuration during operation of a networked system or product. An...

PrinterOn Central Print Services Information Disclosure Vulnerability

PrinterOn Central Print Services CPS is a print service center management solution from PrinterOn Canada. An information disclosure vulnerability exists in PrinterOn CPS version 4.1.4 and earlier. The vulnerability stems from an error in configuration or other errors in the operation of a network...

HumHub Social Network Kit Enterprise Information Disclosure Vulnerability

HumHub Social Network Kit Enterprise is an open source social networking kit. version 1.3.13 of HumHub Social Network Kit Enterprise contains an information disclosure vulnerability that stems from a configuration or other error in the operation of the network system or product, which could be...

Netdata Web application information disclosure vulnerability

Netdata Web application is a web-based host monitoring application. An information disclosure vulnerability exists in Netdata Web application version 1.10.0. The vulnerability arises from a configuration or other error in the operation of a network system or product. An unauthorized attacker coul...

Denial Of Service (DoS)

Oracle MySQL is vulnerable to denial of serviceDoS attacks. A remote user could exploit a flaw in the Client programs component which leads to unauthorized attacker to cause a hang or frequently repeatable crash complete DoS...

CVE-2019-11614

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php. A remote unauthorized attacker could exploit the vulnerability to obtain database sensitive information...

Sql injection

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php. A remote unauthorized attacker could exploit the vulnerability to obtain database sensitive information...

CVE-2019-11614

CVE-2019-11614 refers to a SQL injection in doorGets 7.0, specifically in /doorgets/app/views/ajax/commentView.php. The connected documents confirm a remote, unauthorized attacker could extract sensitive information from the database. The vulnerability is due to improper handling of user-controll...

Microsoft DirectX Information Disclosure Vulnerability (CNVD-2019-10430)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. DirectX is one of the multimedia system libraries. An information disclosure vulnerability...

Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2019-16752)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...

Vulnerability Deep Dive: TP-Link TL-R600VPN remote code execution vulnerabilities

Vulnerability discovery and research by Jared Rittle and Carl Hurd of Cisco Talos. Introduction TP-Link recently patched three vulnerabilities in their TL-R600VPN gigabit broadband VPN router, firmware version 1.3.0. Cisco Talos publicly disclosed these issues after working with TP-Link to ensure...

GHSA-4Q69-Q4Q7-X82C rendertron can remotely shut down Chrome instance

Rendertron 1.0.0 includes an ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application...

CVE-2017-18353

Rendertron 1.0.0 includes an ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application...

CVE-2018-7977

There is an information leakage vulnerability on several Huawei products. Due to insufficient communication protection for specific services, a remote, unauthorized attacker can exploit this vulnerability to connect to specific services to obtain additional information. Successful exploitation of...