Line Security Breach

Line is the instant messaging platform of Line Inc. A security vulnerability exists in Line kokoroemembers card. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere version 2017, which stems from a SQL injection vulnerability in the parameter RELATIVESID...

Lapce security breach

Lapce is a code editor from Lapce open source. It enables lightning fast computation and utilizes Wgpu for rendering. A security vulnerability exists in Lapce version v0.2.8, which stems from allowing an attacker to elevate system privileges...

Lenosp Code Issues Vulnerabilities

Lenosp is a Spring Boot 2.0 rapid development modular scaffolding organized by Zhengzhou Programmers zzdevelop in China. A security vulnerability exists in Lenosp versions 1.0.0 to 1.2.0. The vulnerability stems from an arbitrary file upload vulnerability in the /user/upload component, which allo...

Palantir Gotham Cerberus Cross-Site Scripting Vulnerability

Palantir Gotham Cerberus is a simple Web-based spreadsheet editor from Palantir USA. It has a real-time collaboration feature that validates input against existing data. A security vulnerability exists in the Gotham Cerberus service that stems from the presence of a stored cross-site scripting XS...

Apple watchOS security breach

Apple watchOS is an operating system for smartwatches from Apple Inc. in the United States. A security vulnerability exists in Apple watchOS, which stems from the handling of font files that may lead to arbitrary code execution...

Symfony UX Autocomplete Input Validation Error Vulnerability

Symfony UX Autocomplete is a Symfony open source JavaScript autocomplete feature for Symfony. An input validation error vulnerability exists in Symfony UX Autocomplete versions prior to 2.11.2. An attacker can exploit this vulnerability to successfully submit an invalid entity ID...

Hutool Security Vulnerabilities

Hutool is a small but comprehensive Java tools library from the Chinese Dromara community. A security vulnerability exists in hutool version v5.8.21, which stems from a buffer overflow vulnerability in the component jsonArray...

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.3, which stems from a content security policy that blocks domains that use wildcards may fail...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel elevation of privilege vulnerability can be exploited by an attacker to cause a local elevation of privilege...

Bookreen Code Issues Vulnerabilities

Bookreen is a workspace scheduling software from Bookreen Turkey. It allows every location bookable via IoT devices to create maximum efficiency and satisfaction. A code issue vulnerability exists in Bookreen versions prior to 3.0.0, which stems from the presence of an unrestricted upload...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from improper input validation of the wlan service, possibly due to command injection...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a possible lack of privilege checking in the vowifi service...

ZKTeco ZEM800 Security Vulnerability

The ZKTeco ZEM800 is a biometric device from ZKTeco that is primarily used for access control and time and attendance management systems. A security vulnerability exists in the ZKTeco ZEM800 version 6.60, which originated from a vulnerability that allows local attackers to obtain enrolled user...

WordPress plugin pixtypes cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

Vim Buffer Error Vulnerability

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to vim 9.0.1331, which stems from a heap buffer overflow in the utfcptr2len function...

Vim Security Vulnerabilities

Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 9.0.1848 that stems from the presence of a heap-based buffer overflow issue...

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. GitLab suffers from a security vulnerability that stems from the ability to re...

WordPress plugin call-now-icon-animate 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

WordPress plugin wptables 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...