EUVD-2022-45497

Malicious code in bioql PyPI...

CVE-2022-42423

PDF-XChange Editor is affected by a TIF file parsing issue that can cause a write past the end of an allocated buffer, enabling arbitrary code execution in the current process. Affected component: PDF-XChange Editor (parsing of TIF images). Root cause: out-of-bounds write during TIF data handling...

CVE-2020-18716

creationtimestamp| type| source ---|---|--- 2021-02-05 16:35:26+00:00| seen| https://t.me/cibsecurity/23156...

CVE-2020-18716

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php...

CVE-2020-18716

RockOA (Rockoa) v1.8.7 is affected by CVE-2020-18716 due to insufficient filtering of input in wordAction.php , enabling SQL injection from remote attackers. The vulnerability stems from loose parameter filtering, potentially allowing SQL statements to be executed and privileges accessed or escal...

CVE-2017-18716

creationtimestamp| type| source ---|---|--- 2020-04-24 18:37:19+00:00| seen| https://t.me/cibsecurity/11625...

CVE-2017-18716

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42...

CVE-2017-18716

NETGEAR devices are affected by a stack-based buffer overflow exploitable by an unauthenticated attacker. The affected models and versions are D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42. Connected sources also reiterate this vulnerability a...

CVE-2017-18716

Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42...

Webshell Bypass Vulnerability in D-Shield Firewall of Shenzhen Di Element Technology Co. Ltd (CNVD-2020-18716)

D-ShieldFirewall is an active defense protection software designed specifically for IIS to prevent websites and servers from being invaded by internal and external protection, and is designed based on the concept that the fewer the functions, the safer the server is under the normal operation of...

CVE-2019-18716

CVE-2019-18716 entry is rejected/not used; this CVE ID is not an active vulnerability entry.

CVE-2018-18716

CVE-2018-18716 affects Zoho ManageEngine OpManager 12.3 before 123219, with a Self XSS vulnerability in OpManager’s web interface. Connected CNVD/CVE records corroborate a Cross-Site Scripting issue for OpManager 12.3. The documents do not specify exact exploit steps, vectors beyond the self-XSS ...

Novell Groupwise Windows客户端API非授权邮件访问漏洞

BUGTRAQ ID: 18716 CVECAN ID: CVE-2006-3268 Novell GroupWise是一款跨平台协作软件。 Novell GroupWise的客户端API实现上存在漏洞，攻击者可能利用漏洞绕过安全限制，访问某些非授权的邮件。 Novell Groupwise 7.x Novell Groupwise 6.x Novell Groupwise 5.x 厂商补丁： Novell ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： GroupWise 6.5: Apply SP6 Client Update 1...