vulnerabilities and exploits

(subscribe to this query)

IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the malicious user to view, add, modify or delete information in the back-end database. IBM X-Force ID: 19...

Ibm Datacap Navigator 9.1.7

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 is vulnerable to cross-site request forgery which could allow an malicious user to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Ibm Financial Transaction Manager For Multiplatform 3.2.4

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow an remote malicious user to obtain sensitive information, caused by a man in the middle attack. By SSL striping, an attacker could exploit this vulnerability to obtain sensitive information.

Ibm Financial Transaction Manager For Multiplatform 3.2.4

In the cryptography package prior to 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.

Cryptography.io Cryptography Fedoraproject Fedora 33 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0

1 Github repository

GramAddict up to and including 1.2.3 allows remote malicious users to execute arbitrary code because of use of UIAutomator2 and ATX-Agent. The attacker must be able to reach TCP port 7912, e.g., by being on the same Wi-Fi network.

Gramaddict Gramaddict

Open OnDemand prior to 1.5.7 and 1.6.x prior to 1.6.22 allows CSRF.

Osc Open Ondemand

The ownCloud application prior to 2.15 for Android allows malicious users to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from this archive.

Owncloud Owncloud

The File Firewall prior to 2.8.0 for ownCloud Server does not properly enforce file-type restrictions for public shares.

Owncloud File Firewall

When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in SM8250, SXR2130

Qualcomm Sm8250 Firmware -Qualcomm Sxr2130 Firmware -

In the ownCloud application prior to 2.15 for Android, the lock protection mechanism can be bypassed by moving the system date/time into the past.

Owncloud Owncloud

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook