1705 matches found
WordPress Ultimate Maps by Supsystic Plugin Cross-Site Scripting Vulnerability
WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in WordPress Ultimate Maps by Supsystic Plugin versions prior to 1.2.5. The vulnerability stems from the program not properly filtering tab parameters before outputting them to properties...
Weak Password Vulnerability in Ruckus Wireless Ruckus 7781CM
The Ruckus 7781CM is a wireless access point product from Ruckus Wireless. The Ruckus Wireless Ruckus 7781CM suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...
SQL Injection Vulnerability in Loofah Video App
Loofah Video App is a video app. Loofah Video APP suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
Unspecified Vulnerability in GitLab
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in Gitlab version 11.6 an...
Samsung Email Information Disclosure Vulnerability (CNVD-2021-39551)
Samsung Email application is a cell phone application from Samsung South Korea. It provides the function of sending and receiving e-mail. An information disclosure vulnerability exists in versions prior to Samsung Email 6.1.41.0, which can be exploited by a remote attacker to obtain attachments t...
SQL Injection Vulnerability in MyBatis-Plus
Mybatis-Plus is a MyBatis enhancement toolkit to simplify CRUD operations . MyBatis-Plus suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...
Unbound Infinite Loop Vulnerability
Unbound is a DNS resolver that supports validation, recursion, and caching features. An infinite loop vulnerability exists in dnamepktcopy in Unbound versions prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an infinite loop...
Unbound out-of-bounds write vulnerability (CNVD-2021-32623)
Unbound is a DNS resolver that supports validation, recursion, and caching features. An out-of-bounds write vulnerability exists in sldnsbgettokenpar in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability to cause an out-of-bounds write...
Unbound Assertion Failure Vulnerability
Unbound is a DNS resolver that supports validation, recursion, and caching features. An assertion failure vulnerability exists in dnamepktcopy in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an assertion failure...
Unbound Out-of-Bounds Write Vulnerability
Unbound is a DNS resolver that supports validation, recursion, and caching features. An out-of-bounds write vulnerability exists in rdatacopy in versions of Unbound prior to 1.9.5. An attacker can exploit this vulnerability by compressing names to cause an out-of-bounds write...
Google Chrome Extension Security Bypass Vulnerability (CNVD-2021-35165)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions of Google Chrome prior to 90.0.4430.93. An attacker can exploit the vulnerability to bypass navigation restrictions...
Google Chrome Security Bypass Vulnerability (CNVD-2021-35168)
Google Chrome is a web browser from Google, an American company. A security vulnerability exists in V8 in versions prior to Google Chrome 90.0.4430.93. An attacker can exploit this vulnerability to bypass security restrictions...
CVE-2021-21222
Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...
Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-30886)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Replication component in Oracle MySQL Server 5.7.32, 8.0.22, and earlier versions. An attacker could exploit this vulnerability to affect availability...
Buffer overflow vulnerability in multiple Mozilla products (CNVD-2021-49139)
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A buffer overflow vulnerability exists in several Mozilla products. An...
Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2021-33835)
Oracle VM VirtualBox is a powerful cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.20. An attacker can exploit this vulnerability to compromise Oracle VM VirtualBox by logging into the...
Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-30875)
Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: Group Replication Plugin component in Oracle MySQL Server 5.7.33, 8.0.23, and earlier versions. An attacker could exploit this vulnerability to affect availability...
GPAC memory leak vulnerability (CNVD-2021-30180)
GPAC is a multimedia framework for rich media and distributed under the LGPL license. A memory leak vulnerability exists in the gfhintertracknew function in GPAC version 1.0.1. An attacker can exploit this vulnerability to read memory via specially crafted files...
MGASA-2021-0194 Updated clamav packages fix security vulnerability
The updated packages fix a security vulnerability: A vulnerability in the email parsing module in Clam AntiVirus ClamAV Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability i...