2866 matches found
CVE-2020-24029
Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "corrected in all maintained versions. Password reset requests are validated...
Oniguruma Resource Management Error Vulnerability
Oniguruma is an open source regular expression library. A resource management error vulnerability exists in Oniguruma versions prior to 6.9.3. The vulnerability stems from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product. No detailed...
CVE-2019-9674
...
Vulnerabilities fixed in Siemens products
Siemens has fixed vulnerabilities in several products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Remote code execution Administrator/Root privileges Siemens...
Arbitrary File Deletion Vulnerability in Bludit CMS v3.13.0
Bludit CMS is a foreign multilingual lightweight website CMS system. Bludit CMS v3.13.0 has an arbitrary file deletion vulnerability that allows attackers to delete arbitrary zip files...
Fastify Resource Management Error Vulnerability
Fastify is an OpenJS Foundation open source web framework for Node.js. A resource management error vulnerability exists in Fastify versions v2.14.1 and v3.0.0-rc.4. An attacker can exploit this vulnerability to cause resource exhaustion denial of service...
IBM Security Key Lifecycle Manager Code Issue Vulnerability
IBM Security Key Lifecycle Manager Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. A code issue vulnerability exists in IBM Security Key...
IBM Security Key Lifecycle Manager Account Management Vulnerability
IBM Security Key Lifecycle Manager Tivoli Key Lifecycle Manager is a set of key lifecycle management software from IBM in the United States. The software provides key storage, key maintenance and key lifecycle management for storage devices. An account management vulnerability exists in IBM...
CVE-2020-4573
IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could disclose sensitive information due to responding to unauthenticated HTTP requests. IBM X-Force ID: 184180...
HPE MSE Msg Gw application E-LTU Input Validation Error Vulnerability
HPE MSE Msg Gw application E-LTU is a short message service center application from Hewlett Packard Enterprise HPE. A security vulnerability exists in HPE MSE Msg Gw application E-LTU prior to version 3.2. A remote attacker could exploit the vulnerability to bypass access restrictions...
Mozilla Network Security Services Information Disclosure Vulnerability (CNVD-2020-43765)
Mozilla Network Security Services NSS is a library of functions Network Security Services library from the Mozilla Foundation in the United States. The product provides cross-platform support for SSL, S/MIME and other Internet security standards. A security vulnerability exists in Mozilla Network...
UBUNTU-CVE-2020-15917
common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled...
Unspecified Vulnerability in Sylabs Singularity (CNVD-2020-52437)
Singularity is a Linux-based container platform for running standalone applications. A security vulnerability exists in Sylabs Singularity versions 3.0 through 3.5, which stems from a lack of integrity checks in the program. A remote attacker could exploit the vulnerability by sending a specially...
CVE-2020-8214
A path traversal vulnerability in servey version 3 allows an attacker to read content of any arbitrary file...
CVE-2019-12000
HPE has found a potential Remote Access Restriction Bypass in HPE MSE Msg Gw application E-LTU prior to version 3.2 when HTTPS is used between the USSD and an external USSD service logic application. Update to version 3.2 and update the HTTPS configuration as described in the HPE MSE Messaging...
OPENSUSE-SU-2020:0953-1 Security update for mozilla-nss
This update for mozilla-nss fixes the following issues: mozilla-nss was updated to version 3.53.1 - CVE-2020-12402: Fixed a potential side channel attack during RSA key generation bsc1173032 - Fixed various FIPS issues in libfreebl3 which were causing segfaults in the test suite of chrony...
OPENSUSE-SU-2020:0939-1 Security update for chocolate-doom
This update for chocolate-doom to version 3.0.1 fixes the following issues: - CVE-2020-14983: Fixed a stack-based buffer overflow in the networking code boo1173595...
The vulnerability in the implementation of the Server Message Block (SMBv3) network protocol on Microsoft Windows operating systems allows a perpetrator to cause a service failure.
The vulnerability of the Server Message Block SMBv3 network protocol implementation in Microsoft Windows systems is related to improper handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions by sending specially crafted packets...
CVE-2020-2500
This improper access control vulnerability in Helpdesk allows attackers to get control of QNAP Kayako service. Attackers can access the sensitive data on QNAP Kayako server with API keys. We have replaced the API key to mitigate the vulnerability, and already fixed the issue in Helpdesk 3.0.1 and...