7066 matches found
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables related to alter.c and build.c.
...
In SQLite through 3.31.1 the ALTER TABLE implementation has a use-after-free as demonstrated by an ORDER BY clause that belongs to a compound SELECT statement.
...
alter.c in SQLite through 3.30.1 allows attackers to trigger infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements.
...
USN-5615-3: SQLite vulnerability
USN-5615-1 fixed several vulnerabilities in SQLite. This update provides the corresponding fix for CVE-2020-35525 for Ubuntu 14.04 LTS. Original advisory details: It was discovered that SQLite incorrectly handled INTERSEC query processing. An attacker could use this issue to cause SQLite to crash...
PT-2024-27513 · Ricoh · Ricoh Streamline Nx Pc Client
Name of the Vulnerable Software and Affected Versions: Ricoh Streamline NX PC Client affected versions not specified Description: A use of potentially dangerous function issue exists in the software. If this issue is exploited, files on the PC where the product is installed may be altered...
CVE-2023-43842
Incorrect access control in the account management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to alter user and administrator accounts credentials via HTTP POST request...
CVE-2024-29078: Incorrect Permission Assignment for Critical Resource
Incorrect permission assignment for critical resource issue exists in MosP kintai kanri V4.6.6 and earlier, which may allow a remote unauthenticated attacker with access to the product to alter the product settings...
PT-2024-22704 · Unknown · Mosp Kintai Kanri
Name of the Vulnerable Software and Affected Versions: MosP kintai kanri versions 4.6.6 and earlier Description: The issue is related to incorrect permission assignment for a critical resource, which may allow a remote unauthenticated attacker with access to the product to alter the product...
NVIDIA ChatRTX 安全漏洞
NVIDIA ChatRTX is a content personalization chatbot from NVIDIA, USA. A security vulnerability exists in NVIDIA ChatRTX. An attacker exploited the vulnerability to alter the execution process by sending user input, which could lead to mismanagement of privileges issues...
UBUNTU-CVE-2024-29889
GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability in the saved searches feature to alter another user account data take control of it. This vulnerability is fixed in 10.0.15...
CVE-2023-5973
Brocade Web Interface in Brocade Fabric OS v9.x and before v9.2.0 does not properly represent the portName to the user if the portName contains reserved characters. This could allow an authenticated user to alter the UI of the Brocade Switch and change ports display...
Bitdefender 多款产品安全漏洞
Bitdefender Antivirus Plus and others are products of the Romanian company Bitdefender.Bitdefender Antivirus Plus is a suite of antivirus software that offers mainly cyber threat detection and ransomware protection.Bitdefender Internet Security is a free version of antivirus software that mainly...
Cisco DNA Center 安全漏洞
Cisco DNA Center is a network management and command center service from Cisco. A security vulnerability exists in Cisco DNA Center that stems from a flaw in the web-based management interface that could allow an authenticated, remote attacker to alter specific data within the interface on an...
CVE-2024-28039
Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated attacker to obtain sensitive information, alter data, or cause a denial-of-service DoS condition...
CVE-2024-27974
Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated attacker to alter user information. In the case the user is an administrator, the settings such as the administrator's ID, password, etc...
CVE-2024-28039
Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated attacker to obtain sensitive information, alter data, or cause a denial-of-service DoS condition...
CVE-2024-27974
Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated attacker to alter user information. In the case the user is an administrator, the settings such as the administrator's ID, password, etc...
CVE-2024-27974: Cross-Site Request Forgery (CSRF)
Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated attacker to alter user information. In the case the user is an administrator, the settings such as the administrator's ID, password, etc...