8062 matches found
Hubei Radio and Television Station Yangtze River Cloud Android APP suffers from overstepping access vulnerability
Yangtze River Cloud Android APP is a news and information software created by Hubei Radio and Television Station, which integrates the three functions of government affairs, news and information, and life services. A vulnerability exists in the Hubei Radio and Television Changjiang Cloud Android...
Eaton ELCSoft Out-of-Bounds Access Remote Code Execution Vulnerability
The Eaton ELCSoft programmable logic control software runs on a PC and can help configure the ELC controller. An out-of-bounds access remote code execution vulnerability exists in Eaton ELCSoft, where memory access exceeds the end of the allocation buffer due to the program process failing to...
Hydrogen Krypton Travel App for Android suffers from an override access vulnerability
Hydrogen Krypton Travel APP is a comprehensive service platform in the field of new energy vehicles. The vulnerability exists in "My Wallet" and "My Orders" in the Android version of Hydrogen Krypton Mobility APP, which allows an attacker to view any user's details by using their cell phone numbe...
bouncycastle: Information disclosure in GCMBlockCipher
It was found that an information disclosure flaw in Bouncy Castle could enable a local malicious application to gain access to user's private information...
bouncycastle: Information disclosure in GCMBlockCipher
It was found that an information disclosure flaw in Bouncy Castle could enable a local malicious application to gain access to user's private information...
Stored Cross-Site Scripting Vulnerability in PlayStation Live App
Playcaster Live App is a short video live interactive application. Playcafe Live App has a stored cross-site scripting vulnerability that allows an attacker to insert malicious js code into the page to obtain user cookies and other information...
Zomato: Admin Access to a domain used for development and admin access to internal dashboards on that domain
@prateek0490 Was able to find our development server without any authentication. Which leads to leak the user data and some internal dashboards...
CVE-2015-5179
FreeIPA might display user data improperly via vectors involving non-printable characters...
DEBIAN-CVE-2015-5179
FreeIPA might display user data improperly via vectors involving non-printable characters...
CVE-2015-5179
FreeIPA might display user data improperly via vectors involving non-printable characters...
CVE-2015-5179
FreeIPA might display user data improperly via vectors involving non-printable characters...
Design/Logic Flaw
FreeIPA might display user data improperly via vectors involving non-printable characters...
CVE-2015-5179
FreeIPA might display user data improperly via vectors involving non-printable characters...
CVE-2015-5179
Technical details (affected components, root cause, and patch status) are not publicly provided in the connected documents. Monitor vendor advisories and security trackers for updates.
Variable Override Vulnerability in SchoolCMS
SchoolCMS is a school teaching management system based on PHP+MySQL. SchoolCMS suffers from a variable override vulnerability. An attacker can utilize the browser's TAB function to override access to user information...
ofun.de XSS vulnerability
Vulnerable URL: http://ofun.de/include/userdata.html Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 365766 VIP website status:| No Coordinated Disclosure Timeline: Description| Val...
Google Android System Elevation of Privilege Vulnerability
Android is a set of Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. systemnfc is one of the NFC components. An elevation of privilege vulnerability exists in systemnfc in Android. An attacker can use this vulnerability to bypass security...
PT-2017-6638
Name of the Vulnerable Software and Affected Versions askbot version 0.7.51-4.el6.noarch Description The issue is related to a cross-site scripting XSS vulnerability. Cross-site scripting is a type of security vulnerability that occurs when an attacker is able to inject malicious scripts into a...
Cicada Knowledge Enterprise Portal open source version 6.5 suffers from cross-site scripting vulnerabilities
Cicada Knowledge Enterprise Portal System is an enterprise portal system designed for enterprise marketing use. Cicada Knowledge Enterprise Portal Open Source Edition 6.5 suffers from a cross-site scripting vulnerability, which can be exploited by attackers to insert malicious js code and obtain...
