6424 matches found
PT-2019-6346 · D Link · D-Link Dir-878
Name of the Vulnerable Software and Affected Versions: D-Link DIR-878 version 1.12B01 Description: An issue was discovered that allows an attacker to log in with a blank password at the /HNAP1 URI. The vulnerability is related to weaknesses in the HNAP1 protocol implementation, specifically in th...
SQL Injection Vulnerability in Daimi CMS_V6.0.6
Rice CMS is a free open source, fast, simple PC station and cell phone station building integrated integration system , to provide open source Android cell phone client APK and the corresponding server-side system source code download. Rice CMSV6.0.6 SQL injection vulnerability . Rice CMSV6.0.6...
LPG Gas Company Leaked Details, Aadhaar Numbers of 6.7 Million Indian Customers
Why would someone bother to hack a so-called "ultra-secure encrypted database that is being protected behind 13 feet high and 5 feet thick walls," when one can simply fetch a copy of the same data from other sources. French security researcher Baptiste Robert, who goes by the pseudonym "Elliot...
The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system allows a hacker to inject arbitrary web scripts or HTML code.
The vulnerability of the Web-Dorado plugin for Instagram Feed in the WordPress content management system is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web scripts or HTML code, there...
PT-2019-6437 · Advanced Micro Devices Inc. +2 · Amd Secure Encrypted Virtualization +3
Name of the Vulnerable Software and Affected Versions: Secure Encrypted Virtualization SEV on Advanced Micro Devices AMD Platform Security Processor PSP 0.17 build 11 and earlier Description: The issue is related to an insecure cryptographic implementation in AMD's Secure Encrypted Virtualization...
CVE-2019-8418: Undefined Security Weakness
SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...
Vulnerability of the Server: Optimizer component of the MySQL database management system, which allows a hacker to cause a service failure.
The vulnerability of the Server: Optimizer component of the Oracle MySQL database management system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.
The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Oracle Solaris operating system’s Zones component allows a attacker to gain access to protected information, modify file access rights, or cause service interruptions.
The vulnerability of the Oracle Solaris operating system’s Zones component is related to insufficient access control. Exploiting this vulnerability can allow an attacker to gain access to protected information, modify file access rights, or cause service interruptions...
The vulnerability of the Integrator component of the Oracle Endeca Information Discovery Integrator software, which allows a malicious individual to gain unauthorized access to protected data.
The vulnerability of the Integrator component of the Oracle Endeca Information Discovery Integrator software for data collection and analysis is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to...
The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service allows a intruder to gain unauthorized access to data.
The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to data using the HTTP protocol...
The vulnerability of the Oracle FLEXCUBE Direct Banking (Logoff Page) component of the banking analytics system in the Oracle Financial Services Applications model allows a perpetrator to gain access to protected information.
The vulnerability of the Oracle FLEXCUBE Direct Banking Logoff Page component of the banking analytics system in the Oracle Financial Services Applications is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...
Vulnerability of the Server component: Security: Audit of the Oracle MySQL database management system, allowing a hacker to cause a service failure.
The vulnerability of the Server: Security: Audit component of the Oracle MySQL database management system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...
The vulnerability of the coff_pointerize_aux function in the GNU Binutils development environment allows a hacker to trigger a service failure.
The vulnerability of the coffpointerizeaux function in the GNU Binutils development environment is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
CVE-2018-7839
A Cryptographic Issue CWE-310 vulnerability exists in IIoT Monitor 3.1.38 which could allow information disclosure...
CVE-2017-1200
IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a...
CVE-2017-1200
IBM BigFix Compliance 1.7 through 1.9.91 TEMA SUAv1 SCA SCM does not validate, or incorrectly validates, a certificate.This weakness might allow an attacker to spoof a trusted entity by using a man-in-the-middle MITM attack. The software might connect to a malicious host while believing it is a...
Crooks Continue to Exploit GoDaddy Hole
Godaddy.com, the world's largest domain name registrar, recently addressed an authentication weakness that cybercriminals were using to blast out spam through legitimate, dormant domains. But several more recent malware spam campaigns suggest GoDaddy's fix hasn't gone far enough, and that scammer...
Security Bulletin: Vulnerabilities in Expat affect Intel (R) Manycore Platform Software Stack (MPSS) for Linux and Windows
Summary Intel R Manycore Platform Software Stack MPSS for Linux and Windows have addressed the following vulnerabilities in Expat. Vulnerability Details Summary Intel® Manycore Platform Software Stack MPSS for Linux and Windows have addressed the following vulnerabilities in Expat. Vulnerability...