1397 matches found
RubyGems Infinite Loop vulnerability
RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier, prior to trunk revision 62422 contains a infinite loop caused by negative size vulnerability in ruby gem package tar header that can...
PT-2022-18847 · Jenkins +1 · Jenkins +1
Name of the Vulnerable Software and Affected Versions: Jenkins Continuous Integration with Toad Edge Plugin versions 2.3 and earlier Description: The file browser in Jenkins Continuous Integration with Toad Edge Plugin may interpret some paths to files as absolute on Windows, resulting in a path...
CVE-2021-44779
Unauthenticated SQL Injection SQLi vulnerability discovered in GWA AutoResponder WordPress plugin versions = 2.3, vulnerable at &listid. No patched version available, plugin closed...
DLA-2853-1 ruby2.3 - security update
Bulletin has no description...
BizTalk ESB Toolkit 安全漏洞
Microsoft BizTalk ESB Toolkit is a powerful publish/subscribe mechanism for messaging applications that work by creating and populating subscriptions, which provides an efficient and scalable platform for Service Oriented Architecture SOA applications, from Microsoft Corporation USA. A security...
Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services
Summary A security vulnerability in Node.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Services. Vulnerability Details CVEID: CVE-2021-22939 DESCRIPTION: Node.js could allow a remote attacker to bypass security restrictions. If the https API was used...
CVE-2021-26739
SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter...
CVE-2021-26740
Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code...
Design/Logic Flaw
Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code...
Sql injection
SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter...
CVE-2021-26740
Millken Doyocms 2.3 contains an arbitrary file upload vulnerability in sysupload.php that can lead to arbitrary code execution. The CVE-2021-26740 entry is corroborated by multiple connected records (NVD, Red Hat advisory, CP AI advisory, CVE listing) all referencing the same issue. No vendor-spe...
CVE-2021-26740
Arbitrary file upload vulnerability sysupload.php in millken doyocms 2.3 allows attackers to execute arbitrary code...
CVE-2021-26739
The CVE-2021-26739 entry concerns a SQL injection in pay.php of Millken Doyocms 2.3. The underlying issue is unvalidated input via the attribute parameter, enabling arbitrary SQL execution, with potential high impact per the NVD metrics (base CVSSv3.1 9.8, network attack, no authentication, high ...
CVE-2021-26739
SQL Injection vulnerability in pay.php in millken doyocms 2.3, allows attackers to execute arbitrary code, via the attribute parameter...
Millken DoyoCms SQL注入漏洞
Millken DoyoCms is a Php free open source enterprise Cms website builder. A security vulnerability exists in millken doyocms 2.3 that allows an attacker to execute arbitrary code via attribute parameters...
Code injection
OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality...
UBUNTU-CVE-2021-41867
An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature...
WordPress 插件跨站脚本漏洞
WordPress Plugin is an open source application plugin for WordPress. WordPress plugin Sitewide Notice before version 2.3 has a cross-site scripting vulnerability, the vulnerability stems from the plugin in its content output to the front-end page before the plugin does not validate and escape som...