CVE-2017-2375: Undefined Security Weakness

An issue existed in preventing the uploading of CallKit call history to iCloud. This issue was addressed through improved logic. This issue is fixed in iOS 10.2.1. Updates for CallKit call history are sent to iCloud...

CVE-2021-1045: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-195580473References: N/A...

CVE-2021-39646: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-201537251References: N/A...

CVE-2021-39644: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-199809304References: N/A...

CVE-2021-39641: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-126949257References: N/A...

CVE-2021-39655: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-192641593References: N/A...

CVE-2021-39645: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A...

CVE-2021-44522

A vulnerability has been identified in SiPass integrated V2.76 All versions, SiPass integrated V2.80 All versions, SiPass integrated V2.85 All versions, Siveillance Identity V1.5 All versions, Siveillance Identity V1.6 All versions V1.6.284.0. Affected applications insufficiently limit the access...

Oracle Database Weak NNE Integrity Key Derivation

Advisory ID: SYSS-2021-062 Product: Database Manufacturer: Oracle Affected Versions: 12.1.0.2, 12.2.0.1, 19c Tested Versions: 18c Vulnerability Type: Inadequate Encryption Strength CWE-326 Risk Level: Medium Solution Status: Fixed Manufacturer Notification: 2021-03-17 Solution Date: 2021-08-07...

CVE-2020-16155: Undefined Security Weakness

The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data...

WordPress 插件跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in the Wordpress plugin that stems from insufficient input validation in the Share-one-Drive search function of the Wordpress plugin prior to 1.15.3, allowing an unauthenticated user to create a...

HarmonyOS Application Framework DoS

The vulnerability of the Application Framework module of the HarmonyOS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Cisco Webex Meetings Client Disclosure

The vulnerability of the logging mechanisms in the Cisco Webex Meetings Client software arises from deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these mechanisms...

IBM Spectrum Copy Data Management 加密问题漏洞

IBM Spectrum Copy Data Management, an IBM company that modernizes, simplifies and automates data center copy management processes, is vulnerable to an encryption issue that stems from the fact that IBM Spectrum Copy Data Management uses a weaker-than-expected encryption algorithm, which could be...

IBM Spectrum Copy Data Management加密问题漏洞

IBM Spectrum Copy Data Management, an IBM company that modernizes, streamlines and automates data center copy management processes, has a security vulnerability that stems from the use of a weaker-than-expected encryption algorithm, which could be exploited by an attacker to The vulnerability ste...

OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2021-37059

There is a Weaknesses Introduced During Design...

GOautodial 授权问题漏洞

GOautodial is a next-generation open source omnichannel contact center suite. Goautodial suffers from an authorization issue vulnerability that arises when the API in the software does not properly validate usernames and passwords, allowing callers to specify any value for a parameter and...

CVE-2021-28680: Undefined Security Weakness

The devisemasquerade gem before 1.3 allows certain attacks when a password's salt is unknown. An application that uses this gem to let administrators masquerade/impersonate users loses one layer of security protection compared to a situation where Devise without this extension is used. If the...

ePolicy Orchestrator Extension SQLi

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code remotely, using the user management section...