Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26838)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. An input validation vulnerability exists in the Qualcomm closed-source component in...

Google Android Qualcomm Component Out-of-Range Pointer Offset Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. An out-of-range pointer offset vulnerability exists in the Google Android Qualcomm component. An...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26640)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in Full Disk Encryption in the Qualcomm closed-source...

Google Android Qualcomm Component Unauthorized Operation Vulnerability (CNVD-2017-26844)

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm closed-source components are among the closed-source components developed by Qualcomm. A security vulnerability exists in the Qualcomm closed-source component in Android, whi...

Unauthorized operation vulnerability in Hikvision webcam image setting interface

Hikvision DS-2CD2710F-I, DS-5C-I Series are network camera products developed by Hikvision China. An unauthorized operation vulnerability exists in the image setting interface of Hikvision network cameras, which fails to verify the legitimacy of parameters during reception and processing. An...

Hawtio Cross-Site Request Forgery Vulnerability

Hawtio is a Web console for managing Java frameworks. A cross-site request forgery vulnerability exists in Hawtio. A remote attacker could exploit this vulnerability to perform unauthorized operations...

CloudBees Jenkins Script Security plugin security bypass vulnerability

CloudBees Jenkins CI formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software release/testing projects and some of the timed execution of the task . Script Security...

Ruby OpenSSL Security Bypass Vulnerability

Ruby is a cross-platform, object-oriented, dynamically typed programming language developed by Japanese software developer Yukihiro Matsumoto. A security bypass vulnerability exists in Ruby OpenSSL. An attacker can exploit this vulnerability to bypass certain security restrictions and perform...

VMware Tools Local Elevation of Privilege Vulnerability

VMware Tools is a set of enhancements that come with VMware's VMWare virtual machines. It is a set of drivers provided by VMware to enhance the performance of virtual graphics cards and hard drives, as well as to synchronize the clocks of the virtual machines with those of the host computer. A...

Universal Password Login Vulnerability in Longcai MX of Longcai Technology Inc.

Longcai MX is a marketing website that caters to consumer needs and buying desires. A universal password login vulnerability exists in the '/manage' page of Longcai MX under Longcai Technology. An attacker can exploit the vulnerability to log into the system backend, view sensitive information or...

IBM InfoSphere Master Data Management Cross-Site Request Forgery Vulnerability (CNVD-2017-21240)

IBM InfoSphere Master Data Management MDM is an IBM USA solution for helping organizations manage enterprise-wide master data information about customers, suppliers, products, and accounts. The solution supports the centralization of multiple data domains through three master data usage styles:...

IBM Security Guardium Security Bypass Vulnerability (CNVD-2017-19559)

IBM Security Guardium is a suite of platforms from IBM in the United States that provide data protection capabilities. The platform includes easy UI customization, report management and discovery and a streamlined audit process builder. A security vulnerability exists in IBM Security Guardium tha...

Hashtopus Cross-Site Request Forgery Vulnerability

Hashtopus is a cross-platform client-server tool for distributing hash table tasks between multiple computers. A cross-site request forgery vulnerability exists in Hashtopus version 1.5g. A remote attacker could exploit this vulnerability to perform unauthorized operations...

Google Android Competitive Conditions Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which the TZ API is an interface. A competitive condition vulnerability exists in the TZ API in Android. An attack can exploit this vulnerability to perform unauthorized...

Google Android Secure Display Competitive Conditions Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Secure Display is a secure display component. A competitive condition vulnerability exists in Secure Display in Android. An attacker could exploit this vulnerability to...

Openpgp.js 's2k.js' Security Bypass Vulnerability

Openpgp.js is a library that implements the OpenPGP encryption algorithm in JavaScript. A security bypass vulnerability exists in Openpgp.js. An attacker can exploit this vulnerability to gain access to sensitive information and perform unauthorized operations...

Google Android syscall handler buffer overflow vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. syscall handler is one of the system call handlers. A buffer overflow vulnerability exists in the syscall handler in Android. An attacker can exploit this vulnerability to perform...

Apache OpenMeetings Security Bypass Vulnerability (CNVD-2017-25613)

Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. A security bypass vulnerability exists ...

Apache OpenMeetings Security Bypass Vulnerability

Apache OpenMeetings is the United States Apache Apache Software Foundation developed a set of multi-language customizable video conferencing and collaboration system, which supports audio, video and allows users to view each participant's desktop and so on. A security bypass vulnerability exists ...

Heimdal Man-in-the-Middle Security Restriction Bypass Vulnerability

Heimdal is a Kerberos 5 implementation developed primarily in Sweden. Heimdal violates the Kerberos 5 protocol rules when obtaining service protocol names, allowing remote attackers to exploit the vulnerability to submit special requests, bypass certain security restrictions, and perform...