3065 matches found
PT-2022-21085
Name of the Vulnerable Software and Affected Versions RuoYi versions prior to 4.7.3 Description An arbitrary file upload vulnerability in the background management module allows attackers to execute arbitrary code via a crafted HTML file. Recommendations For versions prior to 4.7.3, update to a...
CVE-2022-32065: Improper Neutralization of Input During Web Page Generation
An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...
CVE-2022-34738
The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background...
CVE-2022-34738
The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background...
CVE-2022-34738
The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background...
CVE-2022-34738
The CVE-2022-34738 entry applies to Huawei/HarmonyOS: SystemUI module has a permission-control vulnerability that could allow a background service to run without user awareness. Public references across CVE/NVD/Red Hat entries corroborate SystemUI privilege-management issues contributing to hidde...
CVE-2022-34738
The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background...
PT-2022-22306
Name of the Vulnerable Software and Affected Versions SystemUI affected versions not specified Description The issue concerns a problem with permission control in the SystemUI module. If exploited, it allows a service to run in the background without the user's knowledge. Recommendations At the...
CVE-2022-34738: Undefined Security Weakness
The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background...
openSUSE: Security Advisory for resource-agents (SUSE-SU-2022:2326-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
HUAWEI HarmonyOS SystemUI module privilege management vulnerability
HUAWEI HarmonyOS is an operating system from China's Huawei HUAWEI. HUAWEI HarmonyOS version 2.0 contains an authorization issue vulnerability that stems from improper privilege management in the SystemUI module, which could be exploited by an attacker to cause device services to run in the...
HUAWEI HarmonyOS 安全漏洞
HUAWEI HarmonyOS is an operating system from China's Huawei HUAWEI. HUAWEI HarmonyOS version 2.0 contains an authorization issue vulnerability that stems from improper privilege management in the SystemUI module, which could be exploited by an attacker to cause device services to run in the...
Criminals are applying for remote work using deepfake and stolen identities, says FBI
The FBI has warned businesses of an uptick in reports of criminals applying for remote work using deepfake and stolen PII personally identifiable information. A deepfake is essentially created or modified media image, video, or audio, often with the help of artificial intelligence AI and machine...
gnome-control-center bug fix and enhancement update
An update is available for gnome-control-center. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-control-center package contains configuration utilitie...
Mermaid 跨站脚本漏洞
Mermaid is a software application. Create charts and visualizations using text and code. A cross-site scripting vulnerability exists in Mermaid versions prior to 9.1.3, which stems from the fact that whenever there is an actual match, the browser issues an http request to load a background image,...
CVE-2021-40955
SQL injection exists in LaiKetui v3.5.0 the background administrator list...
CVE-2021-40956
LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained...
LaikeTui 代码问题漏洞
LaikeTui Laike e-commerce is a stable and small open source mall system for individual developers. LaikeTui 3.5.0 version of a security vulnerability , the vulnerability stems from any file upload can exist in the background plug-ins , attackers can use the vulnerability to execute arbitrary code...