CVE-2020-9300

The Access Control issues include allowing a regular user to view a restricted incident, user role escalation to admin, users adding themselves as a participant in a restricted incident, and users able to view restricted incidents via the search feature. If your install has followed the secure...

Why Our Furniture Will Face the TV for Years to Come

Before the invention of the television, the focal point of any room was the fireplace. In fact, the word "focus" derives from the Latin word for "hearth." However, the invention of the television, coupled with the arrival of central heating, means that, from the mid-20th century onwards, most of ...

Shanghai Zhanmeng Network Technology Co., Ltd.'s ABC Viewing has a Denial of Service Vulnerability

ABC Viewer is a picture viewing software that intelligently turns on hardware acceleration and supports various picture formats. There is a denial of service vulnerability in ABC Viewer, which can be exploited by attackers to cause the software to crash...

Heap Overwrite Vulnerability in ABC Lookup (CNVD-2020-62787)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. A heap out-of-bounds write vulnerability exists in ABC Viewer. An attacker can exploit the vulnerability to cause the software to crash...

CVE-2020-9959

A lock screen issue allowed access to messages on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.0 and iPadOS 14.0. A person with physical access to an iOS device may be able to view notification contents from the lockscreen...

PT-2020-18239

Name of the Vulnerable Software and Affected Versions IBM Curam Social Program Management versions 7.0.9 through 7.0.10 Description A path traversal issue may allow a remote attacker to traverse directories on the system by sending a specially-crafted file path in a URL request, potentially...

CVE-2020-13343

An issue has been discovered in GitLab affecting all versions starting from 11.2. Unauthorized Users Can View Custom Project Template...

Improper access control

Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments...

CVE-2020-22481

An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered when the administrator views the information...

Binary Vulnerability in Shenzhen Xunlei.com Culture Co. Light and Shadow Viewing (CNVD-2020-58372)

Light and Shadow Viewing is a viewing software for photography and designer crowd, fast viewing, accurate color reproduction of pictures in various color spaces and other features. Shenzhen Xunlei.com Culture Co., Ltd. Light and Shadow Viewer has a binary vulnerability that can be exploited by...

WordPress Comment Mismanagement Vulnerability

WordPress is a blogging platform developed using the PHP language. Users can set up their own websites on servers that support PHP and MySQL databases, or use WordPress as a content management system CMS. A comment mismanagement vulnerability exists in wp-includes/comment-template.php in WordPres...

CVE-2020-14512

GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords...

Denial of service vulnerability in wpsphoto

wpsphoto is a picture viewing program. A denial of service vulnerability exists in wpsphoto, which can be exploited by an attacker to cause the server to deny service...

Cisco SD-WAN vManage Software Path Traversal Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco. A path traversal vulnerability exists in the Web management interface in Cisco SD-WAN vManage Software versions 19.2.2 and earlier, which stems from the program failing to...

Siemens Opcenter Execution Core Access Control Error Vulnerability (CNVD-2020-43671)

Opcenter Execution Core formerly known as Camstar Enterprise Platform is a general purpose Manufacturing Execution System MES. An access control error vulnerability exists in Camstar Enterprise Platform all versions and Opcenter Execution Core prior to version 8.2. An attacker could use this...

U.S. Dept Of Defense: RXSS - ████

Hello, friends today when I was checking some sites I found this bug on your own website. Detalis XSS Cross-Site Scripting XSS attacks are a type of injection, in which malicious scripts are injected into otherwise benign and trusted websites. XSS attacks occur when an attacker uses a web...

Extreme Viewing suffers from a buffer overflow vulnerability (CNVD-2020-47978)

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. A buffer overflow vulnerability exists, which can be exploited by an attacker to gain server privileges...

Extreme Viewing suffers from a buffer overflow vulnerability (CNVD-2020-47977)

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. A buffer overflow vulnerability exists, which can be exploited by an attacker to gain server privileges...

CVE-2019-4650

IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 170961...

Extreme Viewing suffers from a buffer overflow vulnerability (CNVD-2020-41322)

Speed View is a super-fast ultra-high-definition viewing software, compatible with almost all mainstream, professional image formats, can quickly open dozens of megabytes or even hundreds of megabytes of large pictures, but also supports a variety of shortcut operations. Extreme Viewer suffers fr...