Moderate: Red Hat Security Advisory: openstack-cinder security and bug fix update

An update for openstack-cinder is now available for Red Hat OpenStack Platform 13.0 Queens. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

openstack-cinder: Data retained after deletion of a ScaleIO volume

An information-leak flaw was found in openstack-cinder deployments using the third-party EMC ScaleIO backend. It was possible for new volumes to contain previous data if they were created from storage pools which had disabled zero-padding. An attacker could exploit this flaw to obtain sensitive...

Unauthorized Access Vulnerability in YCCMS v3.3 System

YCCMS is a version of PHP5 + MYSQL as the technical basis for the development of lightweight CMS station-building system. YCCMS v3.3 system has an unauthorized access vulnerability, which can be exploited by attackers to directly access the background without logging in and perform any operation ...

SQL injection vulnerability in UsualToolCMS backend a_a***.php file

UsualToolCMS is an enterprise-level web content management system written in PHP+MYSQL that uses template separation technology to support the creation of multiple types of sites. A SQL injection vulnerability exists in the aa.php file in the backend of UsualToolCMS. An attacker can exploit the...

PHP Cloud Talent System 4.6 (phpyun) SQL Injection Vulnerability

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. A SQL injection vulnerability exists in the backend of phpyun v4.6. Attackers can use the vulnerability to obtain sensitive information in the databa...

webkitgtk: Improper TLS certificate verification for WebSocket connections

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections...

Universal Password Login Vulnerability in Rongda's Backend Logistics Support System

Ltd. is a large-scale catering industry application software development and system integration as the core, while engaging in advanced management software development, sales, consulting, computer supplies, accessories and electronic products sales of high-tech industry companies. A universal...

Arbitrary File Deletion Vulnerability in HDWiki System Backend Database

Interactive Wiki open source system HDwiki is a free wiki Wiki building system. There is an arbitrary file deletion vulnerability in the backend database of the HDWiki system. An attacker can exploit the vulnerability to delete arbitrary files...

Code execution vulnerability in OURPHP backend (CNVD-2018-23349)

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. OURPHP backend code execution vulnerabilities, attackers can use the vulnerability to obtain control of the web server...

SQL injection vulnerability in OURPHP backend ou***.php file

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. OURPHP background ou.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

Code execution vulnerability in OURPHP backend

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. OURPHP backend code execution vulnerabilities, attackers can use the vulnerability to obtain control of the web server...

Yinchuan Xunlei Network Technology Co., Ltd. website building system has overstepped the right to access vulnerabilities

Yinchuan Xunlei Network Technology Co., Ltd. is one of the Internet application service providers in Ningxia. There is an access vulnerability in the website building system of Yinchuan Xunlei Network Technology Co. Attackers can take advantage of the vulnerability to access the background and...

Code Execution Vulnerability in Ctcms Movie & TV System Backend

Ctcms is a fast website building system that runs on PHP+MYSQL environment. Code execution vulnerability exists in the backend of Ctcms movie and TV system. It allows attackers to upload exp files, execute commands, and gain server privileges...

Stored Cross-Site Scripting Vulnerability in "I want to submit a paper" in the background of Daimi CMS

DAMI CMS is a PC building station and cell phone building station integrated all-in-one system. A stored cross-site scripting vulnerability exists in the "I want to submit" section of the backend of Daimi CMS. An attacker can insert malicious js code into the page to obtain user cookies and other...

PHPSHE B2C Mall System V1.7 SQL Injection Vulnerability in Background

PHPSHE B2C mall system is an online shopping mall system. The system supports express tracking, online chat, order evaluation and statistics. PHPSHE B2C Mall System V1.7 has a SQL injection vulnerability in the background. An attacker can exploit the vulnerability to obtain sensitive database...

DocCms 2016 version has a file upload vulnerability at the backend templates

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is the industry's leading free open source enterprise website building system, enterprise website generation system. DocCms 2016 version of the file...

Code Execution Vulnerabilities in the Backend of OurPHP AoP Building System V1.8.3

OURPHP is Harbin Weicheng Technology Co., Ltd. developed a PHP + MySQL based on the development of W3C standards-compliant building system. OurPHP OURPHP website builder system V1.8.3 code execution vulnerability exists in the background, attackers can use the vulnerability to obtain control of t...

ZTE C520 Smart Camera Has Authentication Flaw Vulnerability

The ZTE C520 is a smart Wi-Fi watchdog camera. An authentication flaw vulnerability exists in the ZTE C520 smart camera. The vulnerability is due to the fact that the smart camera requires username and password authentication to log in and view images and parameter settings, while the...

REDAXO SQL Injection Vulnerability (CNVD-2019-18492)

REDAXO is an open source Web portal content management system . The system supports custom modules , plug-in extensions , project backup and so on. REDAXO 5.6.3 before the version of the core/lib/list.php file 'prepareQuery' function there is a SQL injection vulnerability , a remote attacker can...

SQL Injection Vulnerability in PHPMyWind Backend

PHPMyWind is a PHP+MySQL based, W3C compliant website building engine for enterprise level website building. A SQL injection vulnerability exists in the backend of PHPMyWind. An attacker can exploit the vulnerability to obtain sensitive database information...