Oracle MySQL 输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A denial-of-service vulnerability exists in the InnoDB component of Oracle MySQL Server 5.7.34, 8.0.25 and earlier versions. An attacker could exploit the vulnerability to cause MySQL Server to hang or crash repeatedly and...

Tobesoft Xplatform 输入验证错误漏洞

Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports features such as form and composite component inheritance, CSS auto-setting, and multi-document interfaces. A security vulnerability exists in XPLATFORM 9.2.2.270, which may execute arbitrary...

Moodle 输入验证错误漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from an input validation error vulnerability due to insufficient validation of user-supplied input when processing emai...

LearningDigital Orca HCM digital learning platform 输入验证错误漏洞

The LearningDigital Orca HCM digital learning platform is a digital learning platform from China-based LearningDigital. An input validation error vulnerability exists in the Orca HCM digital learning platform, which stems from a specific feature of the platform that does not properly filter input...

Hashicorp HashiCorp Consul 输入验证错误漏洞

Hashicorp HashiCorp Consul is a suite of distributed, highly available data center-aware solutions from HashiCorp Hashicorp USA. The product is used to connect and provision applications across a dynamically distributed infrastructure. HashiCorp Consul and Consul Enterprise suffers from an input...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2021-51476)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS has an input validation error vulnerability that could be exploited by an attacker to elevate his privileges to...

IBM Security Access Manager Privilege License and Access Control Issues Vulnerability (CNVD-2021-53344)

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. IBM Security Access Manager Docker is vulnerable to a privilege permission and...

Medialize URI.js 输入验证错误漏洞

Medialize URI.js is a Javascript-based code library from the Medialize team that can be used to efficiently stitch URLs. Medialize URI.js is vulnerable to an input validation error that results from a new URI that fails to properly parse https:///, which leads to the system user being directed to...

Juniper Networks Junos OS 输入验证错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS has an input validation error vulnerability that could be exploited by an attacker to elevate his privileges to...

Huawei Manageone 输入验证错误漏洞

Huawei Manageone is a cloud data center management solution from Huawei of China. huawei ManageOne is vulnerable due to a lack of checksum when the program uses certain parameters from external files. An attacker could use the vulnerability to construct a malicious file to achieve elevation of...

pip 输入验证错误漏洞

Pip is a set of tools for installing and managing Python packages. An input validation error vulnerability exists in python pip, which could be exploited by a remote attacker to install a different revision on the repository...

Fortinet FortiSandbox Command Injection Vulnerability

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. Fortinet FortiSandbox suffers from a command injection vulnerability that...

Exiv2 输入验证错误漏洞

Exiv2 is a set of C libraries and command line applications for managing image metadata. It provides the ability to read and write image metadata in multiple formats such as EXIF, IPTC, and XMP.A security vulnerability exists in Exiv2 version 0.27.1, which stems from an integer overflow in Exiv2'...

Jsish 输入验证错误漏洞

Jsish is a small JavaScript parser written in C with a built-in database.Jsish has a buffer overflow vulnerability in versions prior to 3.0.8, which stems from the failure of the product's JsiObjSetLength function to restrict integer data boundaries, allowing an attacker to execute arbitrary code...

Microsoft Hyper-V 输入验证错误漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A denial-of-service vulnerability exists in Hyper-V in Microsoft...

Microsoft Windows Local Security Authority Subsystem Service 输入验证错误漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A denial of service vulnerability exists in the LSA in Microsoft...

Microsoft Windows DNS 输入验证错误漏洞

Windows Server is the brand name of a series of server operating systems released by Microsoft, including all Windows operating systems released under the brand name "Windows Server." Windows Server in Microsoft Windows Server A denial-of-service vulnerability exists in Windows DNS Server. No...

Microsoft Windows Storage Spaces Controller 输入验证错误漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Storage Spaces Controller in...

IBM Security Access Manager 输入验证错误漏洞

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. IBM Security Access Manager Docker is vulnerable to a privilege permission and...

IBM Security Access Manager 输入验证错误漏洞

IBM Security Access Manager is a product for information security management applications from IBM, USA. The product enables access management control through integrated devices for web, mobile and cloud computing. A security vulnerability exists in IBM Security Access Manager Docker, which can b...