CVE-2021-20478

IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self service console. IBM X-Force ID: 197497...

CVE-2021-20478

CVE-2021-20478 affects IBM Cloud Pak System (V2.3). The vulnerability allows a local user to view artifacts belonging to another user in the self-service console. Affected: IBM Cloud Pak System from V2.3.3.0 through V2.3.3.3. Remediation: upgrade to V2.3.3.3 or apply Interim Fix 1 for 2.3.3.x as ...

DaviewIndy has an unspecified vulnerability

DaviewIndy is a document viewing application. The program supports the viewing of documents and images in many formats. A security vulnerability exists in DaviewIndy v8.98.7.0 and earlier versions, which can be exploited by an attacker to conduct arbitrary code execution...

Imagegear has a denial of service vulnerability

ImageGear is a graphic image processing software with scanning, compression, viewing, printing, adding annotations, image editing and other features that enable developers to quickly develop image processing programs. Imagegear suffers from a denial of service vulnerability that can be exploited ...

Imagegear suffers from a denial of service vulnerability (CNVD-2021-50961)

ImageGear is a graphic image processing software with scanning, compression, viewing, printing, adding annotations, image editing and other features that enable developers to quickly develop image processing programs. Imagegear suffers from a denial of service vulnerability that can be exploited ...

Imagegear suffers from a denial of service vulnerability (CNVD-2021-50962)

ImageGear is a graphic image processing software with scanning, compression, viewing, printing, adding annotations, image editing and other features that enable developers to quickly develop image processing programs. Imagegear suffers from a denial of service vulnerability that can be exploited ...

WordPress 安全漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An access control error vulnerability exists in WordPress WP Upload Restriction plugin 2.2.3 and pri...

Philips Vue PACS 安全漏洞

Philips Vue PACS is an image management solution from Philips Europe. A security vulnerability exists in Philips Vue PACS. The vulnerability allows an unauthorized person or process to eavesdrop, view or modify data, gain access to the system, execute code, install unauthorized software, or affec...

Philips Vue PACS 安全漏洞

Philips Vue PACS is an image management solution from Philips Europe. A security vulnerability exists in Philips Vue PACS. The vulnerability allows an unauthorized person or process to eavesdrop, view or modify data, gain access to the system, execute code, install unauthorized software, or affec...

COVID19 Testing Management System 1.0 - 'State' Stored Cross-Site-Scripting (XSS)

Exploit Title: COVID19 Testing Management System 1.0 - 'State' Stored Cross-Site-Scripting XSS Date: 11/06/2021 Exploit Author: BHAVESH KAUL Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/covid19-testing-management-system-using-php-and-mysql/ Version: 1.0 Tested on:...

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the possibility of out-of-buffer operations, allowing attackers to gain unauthorized access to protected information.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informatio...

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the possibility of out-of-buffer operations in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Acrobat Reader Document Cloud lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2020-4990

IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710...

Apple macOS Big Sur 安全漏洞

Apple macOS Big Sur is a mobile application app from Apple USA. A security vulnerability exists in Apple macOS Big Sur prior to version 11.0.1, which originates from a user with screen-sharing access being able to view other users' screens...

Zoom Client Screen Sharing Vulnerability (ZSB-21001) - Windows

The Zoom Client is prone to a vulnerability in the Application Window Screen Sharing Functionality. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Binary Vulnerability in the Official Free Version of ACDSee

ACDSee is an image viewing tool that supports fast opening and browsing of most image formats. ACDSee Official Free Edition contains a binary vulnerability that can be exploited by attackers to cause a denial of service...

Multiple vulnerabilities in Cybozu Office

Overview Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-1657 Operational restrictions bypass vulnerability in Scheduler CWE-264 - CVE-2021-20624 CyVDB-1727 Operational restrictions bypass vulnerability in Bulletin Board CWE-264 - CVE-2021-20625...

JVN#45797538: Multiple vulnerabilities in Cybozu Office

Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-1657 Operational restrictions bypass vulnerability in Scheduler CWE-264 - CVE-2021-20624 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N| Base Score: 4.3 CVSS v2|...

Moodle 信息泄露漏洞

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. There is a security vulnerability in moodle that stems from viewing the full name of another user without permission via the online use...

Moodle 安全漏洞

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17, which stems from a failure to validate that a requesting...