2024 matches found
Teradici PCoIP Management Console Security Vulnerability
Teradici PCoIP Management Console is a console program for managing PCoIP clients from Teradici Canada. A security vulnerability exists in Teradici PCoIP Management Console versions 20.01.0 and 19.11.1. The vulnerability can be exploited by an attacker to reset a password without authentication...
Samsung Mobile Device Authorization Issue Vulnerability
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. Samsung mobile devices have an authorization issue vulnerability that can be exploited by an attacker to unbind an application from the screen without authentication...
Samsung Mobile Device Authorization Issue Vulnerability (CNVD-2020-32862)
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An authorization issue vulnerability exists in Samsung mobile devices, which can be exploited by attackers to modify USB configuration without authentication...
Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-30406)
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An unspecified vulnerability exists in Samsung mobile devices, which can be exploited by attackers to modify security settings without authentication...
CVE-2019-20595
An issue was discovered on Samsung mobile devices with P9.0 software. Quick Panel allows enabling or disabling the Bluetooth stack without authentication. The Samsung ID is SVE-2019-14545 July 2019...
CVE-2019-20533
An issue was discovered on Samsung mobile devices with N7.x, O8.x, and P9.0 released in China or India software. The S Secure app can launch masked apps without a password. The Samsung ID is SVE-2019-13996 December 2019...
CVE-2019-12498
The WP Live Chat Support plugin before 8.0.33 for WordPress accepts certain REST API calls without invoking the wplcapipermissioncheck protection mechanism...
Multiple vulnerabilities in OurPHP
OurPHP is a web content management system developed using the PHP language. OurPHP has multiple vulnerabilities that can be exploited by attackers to obtain sensitive information and issue refund requests without payment...
undertow: Information leak in requests for directories without trailing slashes
undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api...
GHSA-CQQJ-4P63-RRMM HTTP Request Smuggling in Netty
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."...
The vulnerability in the implementation of the Firefox browser’s Activity Stream page allows a perpetrator to access confidential data.
The vulnerability of the Firefox browser’s Activity Stream page relates to a bug in content writing without clearing. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
UBUNTU-CVE-2019-20444
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold."...
PT-2020-6770 · Unknown · Centos Web Panel
Name of the Vulnerable Software and Affected Versions: CentOS Web Panel versions cwp-e17.0.9.8.923 Description: The issue is related to the implementation of the ajax mod security.php script in CentOS Web Panel, where the archivo parameter does not properly neutralize special elements in...
Authorization
Yopify, an e-commerce notification plugin, up to April 06, 2017, leaks the first name, last initial, city, and recent purchase data of customers, all without user authorization...
CVE-2019-8803
An authentication issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, macOS Catalina 10.15.1, tvOS 13.2, watchOS 6.1. A local attacker may be able to login to the account of a previously logged in user without valid credentials...
jenkins-script-security-plugin: handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts
A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.62 and earlier related to the handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts...
Arbitrary File Read Vulnerability in ZTE ZSRV2 Series Multiservice Routers
ZXR10 ZSR V2 series router is a next-generation intelligent access router product integrating routing, switching, wireless, security, VPN, and AC launched by ZTE. The product adopts the industry-leading hardware platform and software architecture, which provides an intelligent and resilient devic...
Unspecified vulnerability in Anviz access control devices (CNVD-2019-44971)
Anviz access control devices is an access control device from Anviz China. A security vulnerability exists in Anviz access control devices. The vulnerability can be exploited by an attacker to change the administrator password without authentication...
Unspecified vulnerability in Anviz access control devices
Anviz access control devices is an access control device from Anviz China. A security vulnerability exists in Anviz access control devices. The vulnerability can be exploited by a remote attacker to issue commands without a password...
