1212 matches found
Acronis True Image 安全漏洞
Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. The software can be used to create drive and disk images and can restore images when a clean system is needed.Acronis True Image has a security vulnerability that can be exploited by attackers for...
ArcGIS Server Manager Stored Cross-Site Scripting Vulnerability
ArcGIS Server is the back-end server software component of ArcGIS Enterprise.ArcGIS Server Manager is an application that is installed with ArcGIS Server and provides an intuitive and convenient interface for managing the server. A stored cross-site scripting vulnerability exists in ArcGIS Server...
Google Android System Remote Code Execution Vulnerability (CNVD-2021-52331)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11, which can be exploited by an attacker to achieve...
WordPress Easy Cookies Policy Plugin Cross-Site Scripting Vulnerability (CNVD-2021-49075)
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL server set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Easy...
phpCMS SQL Injection Vulnerability (CNVD-2021-49040)
PHPCMS is a web content management system based on PHP and Mysql architecture. The system includes modules such as news, pictures, downloads, information and products. A SQL injection vulnerability exists in phpCMS. The vulnerability stems from the diggadd.php file not handling the diggmod...
Kirby Cross-Site Scripting Vulnerability (CNVD-2021-48509)
Kirby is a document-based content management system CMS. A cross-site scripting vulnerability exists in Kirby 3.5.5 and 3.5.6, which stems from the panel's "ListItem" component e.g., used in page and file sections displaying HTML as-is in page headers, and can be exploited by an attacker to condu...
IBM Security Verify Privilege Vault Link Injection Vulnerability
IBM Security Verify Privilege Vault is a privileged access management solution that enables IT administrators and IT security professionals to protect the privileges of all services, applications, roots and administrator accounts across the enterprise. A link injection vulnerability exists in IBM...
GetSimple CMS Cross-Site Scripting Vulnerability (CNVD-2021-45143)
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/edit.php in GetSimple CMS version 3.4.0a. An attacker can exploit this vulnerability to conduct a cross-site scripting attack...
Ice Hrm Cross-Site Scripting Vulnerability (CNVD-2021-45759)
Ice Hrm is a human resource management system. A cross-site scripting vulnerability exists in Ice Hrm 29.0.0 OS. An attacker can exploit the vulnerability by uploading a crafted file that will result in the execution of arbitrary web script or HTML...
Unauthorized Access Vulnerability in layuiAdmin
layuiAdmin is based on layui front-end UI framework to achieve a set of general-purpose pure static interface template for the development of various management systems . An unauthorized access vulnerability exists in layuiAdmin, which can be exploited by attackers to obtain sensitive information...
Nextcloud Android app information disclosure vulnerability (CNVD-2021-44760)
Nextcloud Android app is an Android-based mobile application from Nextcloud Germany for accessing Nextcloud servers. The Nextcloud Android app suffers from an information disclosure vulnerability that can be exploited by an attacker to gain access to shared preference information in the Nextcloud...
Wibu-Systems CodeMeter CmWAN Denial of Service Vulnerability
The Wibu-Systems CodeMeter is a basic technology for all protection and licensing solutions offered by Wibu-Systems. A security vulnerability exists in Wibu-Systems CodeMeter CmWAN, which can be exploited by a remote attacker to submit a special request that can crash the application...
ECShop SQL Injection Vulnerability (CNVD-2021-44948)
ECShop is a professional e-commerce mall system. A SQL injection vulnerability exists in ECShop version 3.0. An attacker can exploit this vulnerability by using the id parameter of admin/shophelp.php to perform SQL injection attacks...
Arbitrary File Deletion Vulnerability in Blue Ocean Premier Billing Management System
Blue Ocean Premier Billing Management System is a network security operation management system that is based on realizing network operation, centering on enhancing global security, and aiming at improving management efficiency. The Blue Ocean Excellence Billing Management System has an arbitrary...
SAP NetWeaver Application Server Cross-Site Scripting Vulnerability
SAP NetWeaver Application Server is an application server from SAP, Germany. A cross-site scripting vulnerability exists in SAP NetWeaver Application Server, which can be exploited by an attacker to launch a cross-site scripting attack...
Adobe Animate Out-of-Bounds Read Vulnerability (CNVD-2021-49188)
Adobe Animate is a multimedia authoring and computer animation program. An out-of-bounds read vulnerability exists in Adobe Animate 21.0.6 and earlier versions. An attacker could exploit this vulnerability to obtain information...
XDcms Has Arbitrary File Deletion Vulnerability
XDcms is a general purpose content management system. XDcms has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete any file on the server...
IBM Security Verify Access Information Disclosure Vulnerability (CNVD-2021-39691)
IBM Security Verify Access, formerly known as IBM Security Access Manager or ISAM, is designed to help you simplify user access and more securely adopt Web, mobile, IoT and cloud technologies. An information disclosure vulnerability exists in IBM Security Verify Access version 20.07. An attacker...
SQL Injection Vulnerability in Purple Electronic File Management System
hereinafter referred to as "Ziguang Software" is a leading provider of industry solutions and IT services in China. A SQL injection vulnerability exists in the Ziguang Electronic File Management System. The vulnerability can be exploited by an attacker to obtain sensitive information from the...