322 matches found
PT-2022-35283 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: A potential memory leak issue was identified in the nouveau bo alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2022-35491 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.150 Description: A potential memory leak was identified in the nouveau bo alloc function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...
UVI-2021-1001626 drm/nouveau: avoid a use-after-free when BO init fails
drm/nouveau: avoid a use-after-free when BO init fails This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.73 by commit...
UVI-2021-1001576 drm/amdgpu: fix gart.bo pin_count leak
drm/amdgpu: fix gart.bo pincount leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.154 by commit 83d857d6b0967b6709cd38750c3ce2ed8ced1a9...
truck1.bo Cross Site Scripting vulnerability OBB-2128430
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Jinan Bo Lin Network Technology Co., Ltd. website building system ab*** page SQL injection vulnerability
Jinan Bo Lin Network Technology Co., Ltd. is a provide Jinan website construction, Jinan website production, Jinan web design, Jinan website design, Jinan website optimization, website maintenance, website revision, domain name space, 400 phone, store marketing and other Internet business Jinan...
Jinan Bo Lin Network Technology Co., Ltd. website building system ne*** page SQL injection vulnerability
Jinan Bo Lin Network Technology Co., Ltd. is a provide Jinan website construction, Jinan website production, Jinan web design, Jinan website design, Jinan website optimization, website maintenance, website revision, domain name space, 400 phone, store marketing and other Internet business Jinan...
SQL Injection Vulnerability in Bo Yun CD-ROM System of Hangzhou Maida Electronics Co.
Hangzhou Maida Electronics Co., Ltd. provides professional library systems, including search, storage, access and other functions, customers involved in the domestic major universities and provincial and municipal libraries. A SQL injection vulnerability exists in Bo Yun CD-ROM system of Hangzhou...
SQL Injection Vulnerability in Bo***.cl***.php File in Dream CMS Backend
Dream CMS lmxcms is developed using php language and mysql database, and adopts the mainstream MVC design model. A SQL injection vulnerability exists in the Bo.cl.php file in the background of Dream CMS. Attackers can use the vulnerability to obtain database sensitive information...
radiolider97.bo Cross Site Scripting vulnerability OBB-1346545
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2020-6288
The CVE-2020-6288 issue affects SAP Business Objects BI Platform (Web Intelligence HTML interface): an attacker with edit-doc rights can upload any file (including scripts) due to insufficient file-format validation, enabling unrestricted upload of dangerous file types and allowing modification o...
CVE-2020-6242
CVE-2020-6242 affects SAP Business Objects BI Platform (Live Data Connect) and its BIPRWS app server, with vulnerability in authentication due to missing check when a specific certificate protection is not applied. Impact: attackers could log into the Central Management Console without a password...
CVE-2019-0396
SAP BusinessObjects BI Platform Web Intelligence HTML interface is affected by CVE-2019-0396 due to insufficient validation of an XML document from untrusted sources. The issue allows an attacker to craft XML with malicious elements that bypass filtering in certain workflows. Affected versions: 4...
Bo-blog Wind CMS ad***.mo***.php page suffers from SQL injection vulnerability
Bo-blog Wind BW for short is a lightweight personal blogging program. A SQL injection vulnerability exists in the Bo-blog Wind CMS ad.mo.php page. An attacker can exploit the vulnerability to obtain sensitive database information...
CVE-2019-0287
CVE-2019-0287 affects SAP BusinessObjects Business Intelligence platform (Central Management Server) for SAP BO BI 4.2 and 4.3. The issue allows an attacker to access information that should be restricted, indicating an information-disclosure vulnerability affecting the Central Management Server ...
Sql injection
Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function...
CVE-2019-7587
Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function...
CVE-2019-7587
Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function...
CVE-2019-7587
CVE-2019-7587 affects Bo-blog Wind through 1.6.0-r. The vulnerability is a SQL Injection in the admin.php/comments/batchdel/ comID parameter, caused by mishandling in the mode/admin.mode.php delBlockedBatch function. The connected sources corroborate the issue and describe it as a SQL injection v...
