CVE-2023-6771

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function saveattendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to th...

CVE-2023-6771

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function saveattendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to th...

CVE-2023-6771

CVE-2023-6771 affects SourceCodester Simple Student Attendance System 1.0 in the actions.class.php, save_attendance function. The sid parameter is vulnerable to SQL injection, enabling an attacker to manipulate queries. Public exploitation information exists. Affected component: save_attendance (...

CVE-2023-6771 SourceCodester Simple Student Attendance System actions.class.php save_attendance sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Student Attendance System 1.0. This issue affects the function saveattendance of the file actions.class.php. The manipulation of the argument sid leads to sql injection. The exploit has been disclosed to th...

部分MediaTek芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which stems from a local privilege escalation due to a lack of privilege checking in vow. The following products are affected: MT6580, MT6735, MT6737, MT6739,...

SUSE CVE-2015-6771

js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via crafted JavaScript code...

CVE-2020-6771

Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same application...

CVE-2020-6771 Uncontrolled Search Path Element in Bosch IP Helper

Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same application...

CVE-2020-6771

Bosch IP Helper (industrial control tool) is affected by CVE-2020-6771 due to an Uncontrolled Search Path Element when loading DLLs. Versions up to 1.00.0008 are affected. The vulnerability requires the victim to place a malicious DLL in the same directory as the portable IP Helper application, e...

CVE-2019-6771

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 2019.010.20098. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2019-6771

CVE-2019-6771 affects Foxit Reader 2019.010.20098. The issue is in the handling of the value property of a Field object within AcroForms, caused by not validating the existence of an object before performing operations. This can be exploited to disclose sensitive information and, when combined wi...

CVE-2018-6771

In Jiangmin Antivirus 16.0.0.100, the driver file KrnlCall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x99008224...

CVE-2018-6771

CVE-2018-6771 affects Jiangmin Antivirus 16.0.0.100 via the KrnlCall.sys driver. The vulnerability arises from not validating input values for IOCTL 0x99008224, enabling local attackers to cause a denial of service (BSOD) and potentially other impacts. Several connected sources (Red Hat, CNVD, CN...

CVE-2017-6771

The CVE-2017-6771 vulnerability affects the Cisco Ultra Services Framework AutoVNF automation tool, where an unauthenticated, remote attacker can view sensitive configuration data by browsing to a specific URL. Root cause: inadequate protection of sensitive data within AutoVNF. Impact: informatio...

CVE-2016-6771

CVE-2016-6771 = Elevation of privilege in Android Telephony. A local malicious application could bypass restrictions in a constrained Telephony process and gain access to system functions beyond its granted level. Affected products/versions identified in the entry: Android 6.0, 6.0.1, and 7.0 (An...

CVE-2016-6771

An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 6.0, 6.0.1, 7.0...

FreeBSD : wireshark -- multiple vulnerabilities (313e9557-41e8-11e6-ab34-002590263bf5)

Wireshark development team reports : The following vulnerabilities have been fixed : - wnpa-sec-2016-29 The SPOOLS dissector could go into an infinite loop. Discovered by the CESG. - wnpa-sec-2016-30 The IEEE 802.11 dissector could crash. Bug 11585 - wnpa-sec-2016-31 The IEEE 802.11 dissector cou...

Mageia: Security Advisory (MGASA-2015-0467)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-6771

CVE-2015-6771 affects Google Chrome/Chromium using the V8 JavaScript engine. The vulnerability is an out-of-bounds read in V8 (js/array.js) related to array map/filter operations, exploitable via crafted JavaScript to cause remote DoS. Affected versions prior to Chrome/Chromium 47.0.2526.73 are f...

UBUNTU-CVE-2015-6771

js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter operations for arrays, which allows remote attackers to cause a denial of service out-of-bounds memory access or possibly have unspecified other impact via crafted JavaScript code...