5671 matches found
File Upload Vulnerability in the Frontend of Nanjing Benan's Hidden Trouble Detection and Management Information System for Work Safety Accidents v2.3
Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. There is a file upload vulnerability in the frontend of Nanjing Benan's Hidden Trouble Identification and Management Information System...
Unauthorized Access Vulnerability in the Frontend of Nanjing Benan's Hidden Trouble Identification and Management Information System for Work Safety V2.3
Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. Unauthorized access vulnerability exists in the front-end of Nanjing Benan's Hidden Accident Investigation and Management Information...
SQL Injection Vulnerability in the Frontend Web*** of Nanjing Benan's Hidden Trouble Detection and Management Information System for Work Safety Accidents v2.3
Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. Nanjing Benan Safety Production Accident Hidden Trouble Detection and Management Information System v2.3 There exists a SQL injection...
CVE-2019-16230
drivers/gpu/drm/radeon/radeondisplay.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. NOTE: A third-party software maintainer states that the work queue allocation is happening during device initialization, which for a graphics ca...
CVE-2019-16230
drivers/gpu/drm/radeon/radeondisplay.c in the Linux kernel 5.2.14 does not check the allocworkqueue return value, leading to a NULL pointer dereference. NOTE: A third-party software maintainer states that the work queue allocation is happening during device initialization, which for a graphics ca...
work-board.com Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8635 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting work-board.com website and its users. Following coordinate...
Atlassian Jira Information Disclosure Vulnerability (CNVD-2019-30067)
Jira is a tool developed by Australian company Atlassian for defect tracking, issue tracking and project management. An information disclosure vulnerability exists in several work log rest resources in Jira. The vulnerability stems from a lack of privilege checking. A remote attacker could exploi...
Starbucks: China – Limited Partner PII Regarding Work Scheduling via Unauthenticated API Endpoint
0xpatrik discovered an unauthenticated API endpoint that allowed retrieval of specified work leave dates of designated Starbucks employees in China. @0xpatrik — thank you for reporting the original vulnerability and for confirming the resolution...
LiveZilla Server Cross-Site Scripting Vulnerability (CNVD-2019-21247)
LiveZilla is a free online customer service system, based on PHP architecture, can run on Linux hosts or windows hosts, mainly divided into the client, server and server side LiveZilla Server. LiveZilla Server 8.0.1.1 before the version of the chat.php create work order operation exists cross-sit...
IBM Spectrum Protect Plus Information Disclosure Vulnerability
IBM Spectrum Protect Plus is a suite of data protection platforms from IBM USA. The platform provides organizations with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. An information disclosure vulnerability...
PT-2019-6223 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.0.21 Description: The issue is related to a use-after-free vulnerability in the btrfs queue work function, located in the fs/btrfs/async-thread.c file. This vulnerability can be exploited by mounting a crafted btrfs...
PB610 HMISimulator provides interface with access to arbitrary files
The HMISimulator component of ABB PB610 Panel Builder 600 uses the readFile/writeFile interface to manipulate the work file. Path configuration in PB610 HMISimulator versions 2.8.0.424 and earlier potentially allows access to files outside of the working directory, thus potentially supporting...
SAP Inventory Manager and SAP Work Manager Denial of Service Vulnerability
SAP Inventory Manager and SAP Work Manager are both products of SAP Germany.SAP Inventory Manager is a warehouse and inventory management application.SAP Work Manager is an asset management application. SAP Work Manager is an asset management application. The program is mainly used for installing...
CVE-2019-0314
SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...
CVE-2019-0314
SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...
Design/Logic Flaw
SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...
CVE-2019-0314
SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...
CVE-2019-0314
Summary: CVE-2019-0314 affects SAP Work Manager (versions 6.3, 6.4, 6.5) and SAP Inventory Manager (version 4.3). The vulnerability enables an attacker to cause a denial of service, preventing legitimate users from accessing services by crashing or flooding the service. The available connected re...
CVE-2019-0314: Undefined Security Weakness
SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service...