Apache Druid Privilege Permission and Access Control Issues Vulnerability

Apache Druid is the United States Apache Apache Foundation of a use of the Java language , written in column-oriented open source distributed database . Apache Druid has a security vulnerability that can be exploited by an attacker to read data from other sources e.g., the local file system using...

LimeSurvey cross-site scripting vulnerability (CNVD-2021-48882)

limesurvey is an open source online questionnaire program with multiple functions such as questionnaire design, modification, release, recovery and statistics. A cross-site scripting vulnerability exists in LimeSurvey version 4.1.11+200316. An attacker can exploit this vulnerability by using the...

osTicket cross-site scripting vulnerability (CNVD-2021-48883)

osTicket is a widely used and trusted open source work order support ticket system. A cross-site scripting vulnerability exists in osTicket versions prior to 1.12.6. An attacker can exploit this vulnerability via the queue-name parameter in include/ajax.search.php...

Google Android phNxpNciHal_print_res_status elevation of privilege vulnerability

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An elevation of privilege vulnerability exists in Google Android phNxpNciHalprintresstatus. An attacker can exploit this vulnerability to cause a local elevation of privilege...

phpIPAM cross-site scripting vulnerability (CNVD-2021-45440)

phpIPAM is a PHP-based open source ip address management software. A reflected cross-site scripting vulnerability exists in phpIPAM version 1.4.3. The vulnerability can be exploited by an attacker to conduct a cross-site scripting attack via app/dashboard/widgets/ipcalc-result.php and...

Google Android iaxxx-codec.c elevation of privilege vulnerability

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. Google Android iaxxx-codec.c suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to cause a local elevation of privilege...

Google Android phNxpNciHal_ext.cc Information Disclosure Vulnerability

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An information disclosure vulnerability exists in Google Android phNxpNciHalext.cc. An attacker can exploit this vulnerability to obtain sensitive information...

White Shark System (WSS) SQL Injection Vulnerability

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". A SQL injection vulnerability exists in White Shark...

Textpattern Arbitrary File Upload Vulnerability

Textpattern is a free open source content management system based on PHP and MySQL. Textpattern has an arbitrary file upload vulnerability. An attacker can use the fileinsert function in include/txpfile.php to upload arbitrary files...

Unspecified Vulnerability in Samsung Galaxy Watch PlugIn

Samsung Galaxy Apps is a pre-installed application store program for Samsung mobile devices from Samsung South Korea. Galaxy Watch PlugIn 2.2.05.21033151 previously had a security vulnerability that could be exploited by an attacker to disclose the Wi-Fi password of a connection to a user's...

74CMS SQL Injection Vulnerability (CNVD-2021-43389)

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can exploit this vulnerability to inject SQL statements via the x parameter of plus/ajaxstreet.php...

74CMS SQL Injection Vulnerability (CNVD-2021-43391)

74CMS is a talent recruitment system based on the second development of ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the key parameter of plus/ajaxstreet.php...

Unspecified vulnerability in BetterLinks WordPress plugin (CNVD-2021-44290)

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in BetterLinks WordPress plugin versions prior to 2.0.4, which stems...

Google Android elevation of privilege vulnerability (CNVD-2021-43400)

Google Android is a Linux-based open source operating system from the Google Open Handheld Alliance Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from a memory corruption due to double release in the memory management driver. An attacker coul...

Google Android elevation of privilege vulnerability (CNVD-2021-43397)

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from an out-of-bounds write due to uninitialized data in the memory management driver. An...

The vulnerability of Microsoft Windows Defender operating system allows a hacker to trigger a service failure.

The vulnerability of Microsoft Windows Defender operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...

Information leakage vulnerability in Baisou Video HD APP

Baisou Video HD APP is a video player. Baisou Video HD APP has an information disclosure vulnerability. An attacker can exploit the vulnerability to backup the app and obtain sensitive information...

CVE-2021-20728

Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App...

Jira Server and Jira Data Center cross-site scripting vulnerability (CNVD-2021-44763)

Atlassian JIRA Server and Jira Server & Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. The system is mainly used for tracking and managing all kinds of problems and defects in the workplace.Jira Server & Dat...

PT-2021-15137 · Google · Asylo

Name of the Vulnerable Software and Affected Versions: Asylo versions prior to 0.6.2 Description: An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. Recommendations: For Asylo versions prior to 0.6.2, update past 0.6.2 or apply the git commit...