403 matches found
Gestionale Amica Prodigy Authorization Issue Vulnerability
Gestionaleamica Gestionale Amica Prodigy is an application from Gestionaleamica. a cloud backup service that ensures accounting security. Gestionale Amica Prodigy suffers from an authorization issue vulnerability that stems from the product not adding the correct permissions to...
CVE-2021-34682
Receita Federal IRPF 2021 1.7 allows a man-in-the-middle attack against the update feature...
CVE-2021-34682
Receita Federal IRPF 2021 1.7 allows a man-in-the-middle attack against the update feature...
PT-2021-15388 · Argo Cd · Argo Cd
Name of the Vulnerable Software and Affected Versions: Argo CD versions 1.8.0 through 1.8.6 Argo CD versions 1.7.0 through 1.7.13 Description: The issue allows an attacker to cause leaked secret data into web UI error messages and logs due to exposure of system data to an unauthorized control...
Debian DLA-2595-1 : velocity security update
It was discovered that there was a potential arbitrary code execution vulnerability in velocity, a Java-based template engine for writing web applications. It could be exploited by applications which allowed untrusted users to upload/modify templates. For Debian 9 'Stretch', this problem has been...
CVE-2020-17534
There exists a race condition between the deletion of the temporary file and the creation of the temporary directory in webkit subproject of HTML/Java API version 1.7. A similar vulnerability has recently been disclosed in other Java projects and the fix in HTML/Java API version 1.7.1 follows...
CVE-2020-17534
There exists a race condition in the HTML/Java API (NetBeans HTML4J) webkit subproject: between deletion of a temporary file and creation of the temporary directory in version 1.7. This issue can lead to local privilege escalation. The fix in version 1.7.1 creates the temporary directory atomical...
PHPSHE SQL Injection Vulnerability
PHPSHE is a set of online shopping mall system of China PHPSHE company. The system supports express tracking, online chat, order evaluation and statistics. SQL injection vulnerability exists in PHPSHE 1.7. An attacker can exploit this vulnerability by using the admin.php?mod=user&userlevelid=1...
PT-2020-15463 · Jenkins · Jenkins Database Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins Database Plugin versions 1.6 and earlier Description: A missing permission check in the Jenkins Database Plugin allows attackers with Overall/Read access to Jenkins to connect to an attacker-specified database server using...
CloudBees Jenkins VncViewer Plugin Cross-Site Scripting Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . VncViewer Plugin is used in which a VNC remo...
CVE-2020-15364
The Nexos theme through 1.7 for WordPress allows top-map/?searchlocation= reflected XSS...
PrestaShop Correos Express Information Disclosure Vulnerability
PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The program provides a variety of payment methods , SMS alerts and product image scaling and other features . Correos Express is one of the logistics management plug-ins . A security vulnerability exists in Correos...
VMware Harbor 1.7.x, 1.8.x < 1.8.6 / 1.9.x < 1.9.3
The version of VMware Harbor installed on the remote host is 1.7.x or 1.8.x prior to 1.8.6 or 1.9.x prior to 1.9.3. It is, therefore, affected multiple vulnerabilities, including the following: - A privilege escalation vulnerability that allows an authenticated, normal user to gain administrative...
Red Hat CoreOS Tectonic Cross-Site Scripting Vulnerability
Red Hat CoreOS Tectonic is an open source, automated enterprise Kubernetes platform from Red Hat. The platform is mainly used to automate the execution of operational tasks to achieve platform portability and multi-cluster management. A cross-site scripting vulnerability exists in Red Hat CoreOS...
Apache Tika Memory Overflow Vulnerability
Apache Tika is the United States Apache Apache Software Foundation, an integrated POI using Java programs to provide MicrosoftOffice format documents read and write functions of the open-source library, Pdfbox read and create PDF documents pure Java class library and for text extraction work to...
PYSEC-2019-223
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent...
CVE-2018-7575
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent...
PYSEC-2019-208
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code local...