The vulnerability of the Apache Flex BlazeDS component, a software tool for managing devices in OnCell Central Manager networks, allows a malicious individual to view the content of any file on the server or perform network scanning of both internal and external infrastructure.

The vulnerability of the Apache Flex BlazeDS component, a software tool for managing devices in OnCell Central Manager networks, is related to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to remotely access and view the content of any file on the...

CVE-2020-9848: Undefined Security Weakness

An authorization issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5. A person with physical access to an iOS device may be able to view notification contents from the lockscreen...

Buffer Overflow Vulnerability in Extreme Viewing (CNVD-2020-40771) at Malpais (Shanghai) Software Technology Co.

Extreme Viewer is a fast viewing software, compatible with all major image formats, and also supports raw, psd, cr2 and so on. Ltd. Extreme Viewer has a buffer overflow vulnerability, an attacker can cause the software to crash through the poc, the successful exploitation of this vulnerability ca...

Extreme Viewing suffers from a heap overflow vulnerability (CNVD-2020-32601)

Extreme Viewer is a super-fast, ultra-high-definition image viewing software that is compatible with all major image formats and professional image formats. A heap overflow vulnerability exists, which can be exploited by an attacker to cause the software to crash...

Extreme Viewing suffers from a buffer overflow vulnerability (CNVD-2020-38489)

Extreme Viewer is a picture viewing software developed by Malpais Shanghai Software Technology Co. A buffer overflow vulnerability exists, which can be exploited to cause a denial of service...

Extreme Viewing suffers from a buffer overflow vulnerability (CNVD-2020-38488)

Extreme Viewer is a picture viewing software developed by Malpais Shanghai Software Technology Co. A buffer overflow vulnerability exists, which can be exploited to cause a denial of service...

Extreme Viewing suffers from a buffer overflow vulnerability (CNVD-2020-38487)

Extreme Viewer is a picture viewing software developed by Malpais Shanghai Software Technology Co. A buffer overflow vulnerability exists, which can be exploited to cause a denial of service...

Extreme Viewing suffers from a buffer overflow vulnerability (CNVD-2020-38485)

Extreme Viewer is a picture viewing software developed by Malpais Shanghai Software Technology Co. A buffer overflow vulnerability exists, which can be exploited to cause a denial of service...

Extreme View has a heap overflow vulnerability

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. Extreme Viewer suffers from a heap overflow vulnerability that can be exploited by attackers to cause a denial of service attack...

Extreme Viewing suffers from a heap overflow vulnerability (CNVD-2020-33238)

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. A heap overflow vulnerability exists, which can be exploited by an attacker to cause the software to crash...

Extreme Viewing suffers from a heap overflow vulnerability (CNVD-2020-33237)

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. A heap overflow vulnerability exists, which can be exploited by an attacker to cause the software to crash...

Extreme Viewing suffers from a heap overflow vulnerability (CNVD-2020-33236)

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. A heap overflow vulnerability exists, which can be exploited by an attacker to cause the software to crash...

Extreme Viewing suffers from a heap overflow vulnerability (CNVD-2020-33234)

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. A heap overflow vulnerability exists, which can be exploited by an attacker to cause the software to crash...

PT-2020-13386 · Cacti +3 · Cacti +3

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.2.11 Description: The issue arises when a user account is disabled in Cacti, but the permissions granted to that account are not immediately invalidated. This means that the disabled account may still have access to...

Horde Groupware Webmail Cross-Site Scripting Vulnerability (CNVD-2020-33657)

Horde Groupware Webmail is a browser-based, enterprise-class communications suite from Horde, Inc. A cross-site scripting vulnerability exists in the image viewing feature in Horde Groupware Webmail Edition prior to 5.2.22, which can be exploited to gain access to a user's Webmail account via a...

WordPress 4.4.x < 4.4.22 Multiple Vulnerabilities

According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - Six cross-site scripting XSS vulnerabilities exist due to improper validation of user-supplied input. An remote attacker can exploit these, by convincing a user to click a...

The vulnerability of the local_graph_id function in the Cacti server monitoring system allows unauthorized access by bypassing authentication using a user-controlled key. This enables attackers to gain access to confidential data.

The vulnerability of the localgraphid function in the Cacti server monitoring system is related to an authentication check error for viewing graphs. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2015, Adobe Acrobat Reader 2015 are related to the lack of measures for cleaning incoming data. This vulnerability allows attackers to disclose protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the lack of measures for cleaning incoming data. Exploiting these vulnerabilities...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to an operation that goes beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability cou...

Starbucks: Thailand - IDOR on www.starbuckscardth.in.th: A logged in user could view any Thailand Starbucks card balance if they knew that Starbucks card number

nnez discovered that after a successful card balance transfer between two of their own registered Thailand Starbucks cards, they could update the 2nd card number URL parameter to another known Thailand Starbucks card number and view that 2nd card balance. @nnez — thank you for reporting this...