CVE-2023-5781

A vulnerability, which was classified as critical, has been found in Tongda OA 2017 11.10. This issue affects the function DELETESTR of the file general/system/resmanage/monitor/deletewebmail.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been...

Sql injection

A vulnerability classified as critical was found in Tongda OA 2017 11.10. This vulnerability affects unknown code of the file general/system/approvecenter/flowguide/flowtype/setprint/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The attack can be initiated remotel...

CVE-2023-5781 Tongda OA 2017 delete_webmail.php DELETE_STR sql injection

A vulnerability, which was classified as critical, has been found in Tongda OA 2017 11.10. This issue affects the function DELETESTR of the file general/system/resmanage/monitor/deletewebmail.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2023-5780 Tongda OA 2017 delete.php sql injection

A vulnerability classified as critical was found in Tongda OA 2017 11.10. This vulnerability affects unknown code of the file general/system/approvecenter/flowguide/flowtype/setprint/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The attack can be initiated remotel...

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A security vulnerability exists in TONGDA Office Anywhere 2017 version 11.10, which originates from a SQL injection vulnerability in the function DELETESTR in the file DELETEwebmail.php...

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere V11.10 and earlier, v2017, which originates from an unknown function /manage/deletequery.php in the component General News, which causes an SQL injection via the parameter...

Ubuntu 16.04 ESM : openpyxl vulnerability (USN-4821-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4821-1 advisory. It was discovered that openpyxl incorrectly handled certain documents. A remote attacker could possibly use this issue to cause a denial of service or other...

Ubuntu 16.04 ESM : Checkmk vulnerabilities (USN-5527-2)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5527-2 advisory. USN-5527-1 fixed vulnerabilities in Checkmk. This update provides the corresponding update for Ubuntu 16.04 ESM. Tenable has extracted the preceding...

Ubuntu 16.04 ESM : LAME vulnerabilities (USN-4780-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4780-1 advisory. It was discovered that LAME incorrectly handled certain audio files. A remote attacker could possibly use this issue to cause a denial of service. Eight...

Ubuntu 16.04 ESM : Gifsicle vulnerabilities (USN-4803-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4803-1 advisory. It was discovered that Gifsicle did not properly handle certain input. If a user were tricked into opening a malicious GIF, an attacker could potentially...

Ubuntu 16.04 ESM : Puppet vulnerabilities (USN-4804-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4804-1 advisory. It was discovered that Puppet installed modules with world writable permissions. An attacker could use this vulnerability to execute arbitrary code or...

Ubuntu 16.04 ESM : Moment.js vulnerabilities (USN-4786-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4786-1 advisory. It was discovered that Moment.js mishandled certain regular expressions. An attacker could use this vulnerability to cause a denial of service. Tenable h...

Ubuntu 16.04 ESM : WildMIDI vulnerabilities (USN-4807-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4807-1 advisory. It was discovered that WildMIDI incorrectly handled certain MID files. A remote attacker could possibly use this issue to cause a denial of service...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Avahi vulnerabilities (USN-3876-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3876-1 advisory. Chad Seaman discovered that Avahi incorrectly handled certain messages. An attacker could possibly use this issue to cause a deni...

CVE-2023-5682

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/training/record/delete.php. The manipulation of the argument RECORDID leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-5682

CVE-2023-5682 affects Tongda OA 2017, specifically the file general/hr/training/record/delete.php. The vulnerability is a SQL injection caused by unsafely handling the RECORD_ID argument, enabling attackers to manipulate queries. Public exploit exposure is indicated in multiple sources. Impact is...

Ubuntu 16.04 ESM : Crypto++ vulnerability (USN-4827-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4827-1 advisory. It was discovered that Crypto++ mishandled certain input. An attacker could use this vulnerability to leak potentially sensitive information. Tenable has extracte...

Ubuntu 16.04 ESM : The Sleuth Kit vulnerabilities (USN-4765-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4765-1 advisory. It was discovered that The Sleuth Kit did not properly handle certain entires in FAT file systems. An attacker could use this vulnerability to mislead an...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Exiv2 vulnerabilities (USN-3852-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3852-1 advisory. It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of...

Ubuntu 16.04 ESM : HTCondor vulnerabilities (USN-4771-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4771-1 advisory. It was discovered that HTCondor incorrectly invoked the mailx utility. An attacker could use this vulnerability to execute arbitrary commands. This issue...