Cryptocat has an unspecified vulnerability (CNVD-2019-40499)

Cryptocat is an open source online cryptographic chat application. A security vulnerability exists in Cryptocat versions prior to 2.0.22. An attacker can exploit the vulnerability to perform unauthorized operations...

Security Advisory 2019-11-05-2 - LuCI CSRF vulnerability (CVE-2019-17367)

DESCRIPTION A logic flaw in LuCI's HTTP routing component led to ineffective CSRF token testing for various request endpoints, specifically ones using the arcombine dispatch action. This allows 3rd party web pages running in the same browser session as an active LuCI login session to perform...

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2019-40094)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A cross-site request forgery vulnerability exists in IBM InfoSphere Information Server, which can be...

Zyxel NBG-418N v2 Modem Cross-Site Request Forgery Vulnerability

The Zyxel NBG-418N is a broadband router. The Zyxel NBG-418N v2 Modem suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to execute arbitrary script code in the context of an affected site to steal cookie-based authentication credentials or perform...

Weak Password Vulnerability in NetGuard Network Audit System V3.0 of Beijing NetGuard Nebula Information Technology Co.

Netnifty Network Audit System Operation and Maintenance Security Control Type is one of Netnifty's comprehensive internal control series products. It is a compliance control system that controls and audits user operation and maintenance operations in the business environment. Netnifty Network Aud...

Tianjin Qipeng Technology Development Co., Ltd. website building system backstage existence of universal password login vulnerability

Tianjin Qipeng Technology Development Co., Ltd. is a main website construction web port company. A universal password login vulnerability exists in the website building system of Tianjin Qipeng Technology Development Co. Attackers can use this vulnerability to log in the background, obtain...

Heilongjiang Provincial Government Service Network has a logic flaw vulnerability

Heilongjiang Provincial Government Service Network is the Heilongjiang Provincial Government to improve the economic and social development of Longjiang environment to create a comprehensive service platform covering the municipal government departments of the online examination and approval. A...

Cisco Finesse Input Validation Error Vulnerability

Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. An input validation error vulnerability exists in Cisco Finesse. An attacker could exploit this vulnerability to gain access to the system and perform unauthorized operations...

LibreOffice Input Validation Error Vulnerability

LibreOffice is an open source office software suite from The Document Foundation TDF. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. A security mode bypass vulnerability exists in LibreOffice, which can be exploited by an attacker to...

Input Validation Error Vulnerability in Multiple Qualcomm Products (CNVD-2020-20157)

Qualcomm MDM9206 and others are products of Qualcomm Incorporated.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU product.The SDX24 is a modem.The MDM9206 is a central processing unit CPU product.The MDM9607 is a central processing unit CPU...

Cross-Site Request Forgery Vulnerability in Multiple AudioCodes Products

AudioCodes Mediant 500L-MSBR and so on are products of AudioCodes Israel.AudioCodes Mediant 500L-MSBR is a 500L series all-in-one SOHO/SMB router.AudioCodes Mediant 500-MSBR is a 500 The AudioCodes Mediant 500-MSBR is a 500L series all-in-one SOHO/SMB router. A cross-site request forgery...

Drupal Access Bypass Vulnerability (CNVD-2019-26798)

Drupal is an open source content management system developed by the Drupal community using the PHP language. A security vulnerability exists in Drupal 8.7.4. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...

Moodle Security Bypass Vulnerability (CNVD-2019-24402)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security bypass vulnerability exists in Moodle, which can be exploited by attackers to bypass security restrictions and perform...

Mozilla Firefox Security Bypass Vulnerability (CNVD-2019-22628)

Mozilla Firefox is a product of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security bypass vulnerability exists in Mozilla Firefox, which could be exploited by an attacker to bypass...

Logic Flaw Vulnerability in China Merchants Bank App Activity Business

China Merchants Bank APP is the center of gravity for China Merchants Bank to build a digital financial service platform, which is the carrier and platform for China Merchants Bank to connect users. There is a logic flaw vulnerability in the active business of China Merchants Bank APP. An attacke...

IBM Cloud Private Cross-Site Request Forgery Vulnerability

IBM Cloud Private is a set of enterprise private cloud solutions from IBM USA. The product is built primarily on Kubernetes and container technology. A cross-site request forgery vulnerability exists in IBM Cloud Private. An attacker can exploit this vulnerability to perform malicious unauthorize...

HPE Intelligent Management Center (IMC) UrlAccessController Authentication Bypass Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An UrlAccessController authentication bypass vulnerability exists in HPE Intelligent Management Center IMC...

Microsoft Dynamics On-Premise Security Bypass Vulnerability

Microsoft Dynamics 365 is an ERP business solution for multinational organizations. A security bypass vulnerability exists in Microsoft Dynamics On-Premise. An attacker could exploit this vulnerability to bypass certain security restrictions and perform unauthorized operations...

Unauthorized Access Vulnerability in Acme CMS

Acme CMS is a full-featured, PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction CMS building system. Acme CMS has an unauthorized access vulnerability that can be exploited by attackers to conduct unauthorized operations...

WPA encryption problem vulnerability

WPA is a set of Wi-Fi access protection schemes from the Wi-Fi Alliance USA, including security protocols and security authentication procedures. There is a security vulnerability in WPA. An attacker can exploit the vulnerability to bypass security restrictions and perform unauthorized operations...