6424 matches found
Multiple NETGEAR Products Licensing Issues Vulnerabilities
The NETGEAR AC1450, among others, is a wireless router from NETGEAR. An authorization issue vulnerability exists in multiple NETGEAR products. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network system or product. No detailed...
V-Zug Combi-Steam MSLQ Authorization Issue Vulnerability (CNVD-2019-42365)
The V-Zug Combi-Steam MSLQ is an all-in-one microwave, oven, and steam machine unit from Swiss Swiss V-Zug. An authorization issue vulnerability exists in the V-Zug Combi-Steam MSLQ using firmware versions prior to Ethernet R07 and firmware versions prior to WLAN R05. The vulnerability stems from...
CVE-2016-9652: Undefined Security Weakness
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75...
CVE-2016-5194: Undefined Security Weakness
Unspecified vulnerabilities in Google Chrome before 54.0.2840.59...
OpenSSL CMSdecrypt PKCS7decrypt Secret Data Access
The vulnerability of the CMSdecrypt and PKCS7decrypt functions cmsenv.c, cmssmime.c, and pk7doit.c in the OpenSSL library is related to deficiencies in the encryption mechanism for confidential data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized...
CVE-2011-5330: Undefined Security Weakness
Distributed Ruby aka DRuby 1.8 mishandles the sending of syscalls...
CVE-2011-5331: Undefined Security Weakness
Distributed Ruby aka DRuby 1.8 mishandles instanceeval...
CVE-2019-6664: Undefined Security Weakness
On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices...
CVE-2013-4108: Undefined Security Weakness
Multiple unspecified vulnerabilities in Cryptocat Project Cryptocat 2.0.18 have unknown impact and attack vectors...
Oracle Hospitality Reporting and Analytics Component Privilege Escalation
The vulnerability of the Oracle Hospitality Reporting and Analytics component in the Oracle Food and Beverage Applications suite is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to remotely gain access, enabling them to modify, add, or delete...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside component in the software development toolset SDK related to Outside in Technology is linked to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or delete data...
Portal sub-component PeopleSoft Enterprise PeopleTools Data Access
The vulnerability of the Portal subcomponent of the Oracle PeopleSoft Enterprise PeopleTools business application suite relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, or to unauthorizedly access...
Outside In Filters Component Unauthorized Access
The vulnerability of the Outside component in the software development toolset SDK related to Outside in Technology is linked to insufficient access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, add, or delete data...
Server MySQL Encryption Downtime DoS
The vulnerability of the MySQL Server component’s Security: Encryption module is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause downtime or service failures using the MySQL protocol...
Networking Component DoS
The vulnerability of the Networking component in Java SE and Java SE Embedded software platforms is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures using various network protocols...
CVE-2019-16208
Password-based encryption PBE algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services Radius, TACAS, etc...
CVE-2019-16208
Password-based encryption PBE algorithm, of Brocade SANnav versions before v2.0, has a weakness in generating cryptographic keys that may allow an attacker to decrypt passwords used with several services Radius, TACAS, etc...
GHSA-RC75-CF5C-MXVH Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml
The SAML identifier generated within SAML2Utils.java was found to make use of the apache commons-lang3 RandomStringUtils class which makes them predictable due to RandomStringUtils PRNG's algorithm not being cryptographically strong. This issue only affects the 3.X release of pac4j-saml...
Kernel: page cache side channel attacks
A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cache' caching mechanism. A malicious user/process could use 'in memory' page-cache knowledge to infer access timings to shared memory and gain knowledge which can be us...