CVE-2019-17444

Jfrog Artifactory uses default passwords such as "password" for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0...

Default credentials

Jfrog Artifactory uses default passwords such as "password" for administrative accounts and does not require users to change them. This may allow unauthorized network-based attackers to completely compromise of Jfrog Artifactory. This issue affects Jfrog Artifactory versions prior to 6.17.0...

Denial Of Service (DoS)

postgresql is vulnerable to denial of service DoS. The vulnerability exists in PostgreSQL's regular expression engine. An authenticated attacker could use these flaws to cause a denial of service by causing the PostgreSQL server to crash, enter an infinite loop, or use extensive CPU and memory...

CVE-2020-2099

Jenkins 2.213 and earlier, LTS 2.204.1 and earlier improperly reuses encryption key parameters in the Inbound TCP Agent Protocol/3, allowing unauthorized attackers with knowledge of agent names to obtain the connection secrets for those agents, which can be used to connect to Jenkins, impersonati...

OpenStack Nova Information Disclosure Vulnerability (CNVD-2019-44961)

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration and Rackspace, Inc. in the U.S. OpenStack Nova is one of the cloud computing construct controllers written in Python. It is part of the IaaS system. An information disclosure...

Multiple Kaspersky Products Information Disclosure Vulnerability (CNVD-2020-01949)

Kaspersky Anti-Virus is a suite of antivirus programs, Kaspersky Internet Security is a suite of security software with both anti-virus and firewall features, Kaspersky Total Security is a suite of full-featured security software, and Kaspersky Internet Security is a suite of security software wi...

Qualcomm WLAN Host Information Disclosure Vulnerability

Qualcomm WLAN Host is a wireless LAN component from Qualcomm Incorporated USA. An information disclosure vulnerability exists in Qualcomm WLAN Host, which arises from configuration and other errors in the operation of the network system or product, and can be exploited by an unauthorized attacker...

The vulnerability of the ZingBox Inspector, a network traffic handler, arises due to insufficient validation of input data. This allows unauthorized attackers to intercept and modify software update packets.

The vulnerability of the ZingBox Inspector network traffic processor exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor to intercept and modify software update packets remotely without authorization...

Google Android Storage Driver Information Disclosure Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Storage driver is one of the storage drivers. An information disclosure vulnerability exists in the Storage driver in Android. The vulnerability stems from errors such as configuration...

floragunn Search Guard Information Disclosure Vulnerability

floragunn Search Guard is a German floragunn company for Elasticsearch and ELK open source plug-ins , it mainly provides encryption , authentication , authorization management and log auditing and other functions . An information disclosure vulnerability exists in versions prior to floragunn Sear...

ShapeShift KeepKey Information Disclosure Vulnerability

ShapeShift KeepKey is an e-wallet device for cryptocurrency storage. An information disclosure vulnerability exists in ShapeShift KeepKey, which can be exploited by unauthorized attackers to obtain sensitive information about affected components...

CVE-2019-10371

A session fixation vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows unauthorized attackers to impersonate another user if they can control the pre-authentication session...

Information Disclosure

jenkins is vulnerable to information disclosure. Unauthorized attackers are able to confirm the existence of agents or views by sending a malicious CLI command...

Redbrick Technologies Shift Information Disclosure Vulnerability

Redbrick Technologies Shift is a suite of application platforms from Redbrick Technologies, a Canadian company. The platform supports managed access to email, chat programs, network storage, and more. An information disclosure vulnerability exists in Redbrick Technologies Shift version 3.4.3 and...

Information Disclosure Vulnerability in Multiple Intel Products (CNVD-2019-22233)

Intel Xeon Scalable Processors are products of Intel Corporation.Intel Xeon Scalable Processors is a scalable server central processing unit CPU.Intel Xeon Processor E7 v4 Family is a Xeon E7 series server central processing unit CPU.Intel Xeon Processor E5 v4 Family is a Xeon E5 series server...

Gemalto Ezio Server Information Disclosure Vulnerability

Gemalto Ezio Server is an authentication server from Gemalto USA. An information disclosure vulnerability exists in Gemalto Ezio Server versions prior to 3.1.0. The vulnerability arises from errors in the configuration of a networked system or product during operation, and can be exploited by an...

Denial Of Service (DoS)

Oracle MySQL is vulnerable to denial of serviceDoS attacks. A remote user could exploit a flaw in the Server: FTS component which allows unauthorized attackers to cause frequently repeatable crash on the target system...

Denial Of Service (DoS)

Oracle MySQL is vulnerable to denial of serviceDoS attacks. A remote user could exploit a flaw in the Server: Optimizer component which allows unauthorized attackers to cause frequently repeatable crash on the target system...

Denial Of Service (DoS)

Oracle MySQL is vulnerable to denial of serviceDoS attacks. A remote user could exploit a flaw in the Server: DML component which allows unauthorized attackers to cause frequently repeatable crash on the target system...

Denial Of Service (DoS)

Oracle MySQL is vulnerable to denial of serviceDoS attacks. A remote user could exploit a flaw in the Server: DML component which allows unauthorized attackers to cause frequently repeatable crash on the target system...