CVE-2023-2852

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Softmed SelfPatron allows SQL Injection.This issue affects SelfPatron : before 2.0...

CVE-2023-3142

Cross-site Scripting XSS - Stored in GitHub repository microweber/microweber prior to 2.0...

CVE-2023-2840

NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2...

SUSE CVE-2023-2034

Unrestricted Upload of File with Dangerous Type in GitHub repository froxlor/froxlor prior to 2.0.14...

CVE-2022-2808

Authorization Bypass Through User-Controlled Key vulnerability in Algan Software Prens Student Information System allows Object Relational Mapping Injection. This issue affects Prens Student Information System: before 2.1.11...

DEBIAN-CVE-2022-2400

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...

CVE-2022-0085

Server-Side Request Forgery SSRF in GitHub repository dompdf/dompdf prior to 2.0.0...

CVE-2022-28162

Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text...

CVE-2022-28162

Brocade SANnav before version SANnav 2.2.0 logs the REST API Authentication token in plain text...

chatwoot 安全漏洞

chatwoot is a software application. Customer Engagement Suite, an open source alternative to Intercom, Zendesk, Salesforce Service Cloud, and more. A security vulnerability exists in versions of chatwoot prior to v2.2, which stems from improper permissions management in the GitHub repository prio...

CVE-2021-45651

Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBK50 before 2.7.3.22, RBR50 before 2.7.3.22, and RBS50 before 2.7.3.22...

Huawei HarmonyOS 数据伪造问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security bypass vulnerability exists in HarmonyOS versions prior to 2.0, where a component of HarmonyOS does not adequately validate data authenticity...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. An information disclosure vulnerability exists in HarmonyOS prior to version 2.0, which stems from a vulnerability in a component of HarmonyOS that exposes...

Dw1 apkleaks 参数注入漏洞

Dw1 apkleaks is a Dw1 open source application . It is used to scan APK files for URIs, endpoints and secrets. A security vulnerability exists in APKLeaks prior to v2.0.3, which can be exploited by an attacker to contain allow execution of unexpected commands or code...

marked 资源管理错误漏洞

marked is the United States Christopher Jeffrey personal developer of a Markdown parser and compiler written in JavaScript . A resource management error vulnerability exists in Marked versions 1.1.1 and prior to 2.0.0, which can affect any user who runs user-generated code through Marked. No...

CVE-2020-5975

NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application software that includes sensitive information as part of a URL, which may lead to information disclosure...

Yii 2 Remote Code Execution Vulnerability

Yii Framework is a component-based , high-performance PHP framework for developing large-scale Web applications . A remote code execution vulnerability exists in Yii 2 versions prior to 2.0.38. The vulnerability can be exploited to achieve remote code execution via input containing a specially...

CVE-2020-9395

An issue was discovered on Realtek RTL8195AM, RTL8711AM, RTL8711AF, and RTL8710AF devices before 2.0.6. A stack-based buffer overflow exists in the client code that takes care of WPA2's 4-way-handshake via a malformed EAPOL-Key packet with a long keydata buffer...

FreeRDP Buffer Overflow Vulnerability (CNVD-2020-31437)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A buffer overflow vulnerability exists in cliprdrreadformatlist in versions prior to FreeRDP 2.0.0. The vulnerability stems from a network system or product performing operations in memory without...

CVE-2019-16205

A vulnerability, in Brocade SANnav versions before v2.0, could allow remote attackers to brute-force a valid session ID. The vulnerability is due to an insufficiently random session ID for several post-authentication actions in the SANnav portal...