Okta Advanced Server Access Client 命令注入漏洞

Okta Advanced Server Access Client is a zero-trust identity and access management for cloud and local infrastructures from Okta USA. A security vulnerability exists in Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 that stems from the presence of a command injection vulnerabili...

Cockpit 安全漏洞

Cockpit is an interactive server management interface. A security vulnerability exists in Cockpit versions prior to 2.4.0, which stems from the use of platform-dependent third-party components...

XWiki Platform 安全漏洞

XWiki Platform is a suite of Wiki platforms for creating Web collaboration applications from the French company XWiki. A security vulnerability exists in XWiki Platform that stems from insufficient authentication of user rights...

elf-parser 安全漏洞

elf-parser is a lightweight elf binary parser with no external dependencies by the finixbit personal developer. A security vulnerability exists in finixbit elf-parser. An attacker could exploit this vulnerability to cause a denial of service...

SourceCodester Computer Parts Sales and Inventory System SQL注入漏洞

Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. A SQL injection vulnerability exists in SourceCodester Computer Parts Sales and Inventory System version 1.0, which originates from an unknown part of the...

vantage6 安全漏洞

vantage6 is vantage6 open source an open source priVAcy preserviNg federalTed leArningG infrastructure for Secure Insight eXchange. A security vulnerability exists in versions prior to vantage6 3.8.0 that stems from the system assigning existing users to different organizations, which could lead ...

SerenityOS 输入验证错误漏洞

SerenityOS is a graphical Unix-like operating system for x86 computers. SerenityOS has an input validation error vulnerability that stems from the presence of an integer overflow vulnerability...

Red Hat Keycloak 跨站脚本漏洞

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Red Hat Keycloak that stems from incorrect null byte handling and a reflected cross-site scripting XSS...

Google Android 数据伪造问题漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by improper use of cryptocurrency. An attacker can exploit the vulnerability to gain elevated privileges...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.17.2, which stems from reuse after release...

Google Golang 安全漏洞

Google Golang is a static, strongly typed, compiled language from Google.The syntax of Go is close to C, but with differences in variable declarations.Go supports garbage collection.Go's parallel model is based on Tony Hall's Communicating Sequential Processes CSP, and other languages with a...

Apple Music 安全漏洞

Apple Music is a music program by the American company Apple Apple. A security vulnerability exists in Apple Music versions prior to 3.5.0. An attacker exploiting the vulnerability could track user activity...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from the US-based company Mattermost. Mattermost suffers from a security vulnerability that stems from a lack of permission checking, which can be exploited by an attacker to modify the script...

lite-web-server 资源管理错误漏洞

lite-web-server is a simple library for creating web servers by the individual developers of chasyumen. A security vulnerability exists in lite-web-server that stems from vulnerability to Denial of Service DoS attacks...

pdf_info 安全漏洞

pdfinfo is a package pdfinfo command line tool by tomtaylor personal developer. A security vulnerability exists in pdfinfo version 0.5.3, which can be exploited by an attacker to execute operating system commands using a command chain...

Node.js 安全漏洞

Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js that stems from the presence of a cryptographic vulnerability that could be exploited by an attacker to cause a denial of service...

Node.js 代码问题漏洞

Node.js is an open source, cross-platform JavaScript runtime environment. Node.js suffers from a security vulnerability that stems from the presence of an untrustworthy search path vulnerability that can be exploited by an attacker to elevate privileges...

tui.chart 跨站脚本漏洞

tui.chart is an NHN open source beautiful chart for data visualization. A cross-site scripting vulnerability exists in version 4.1.4 of tui.chart, which stems from a problem with some unknown handling of the component Legend Handler that can lead to a cross-site scripting vulnerability...

H3C A210-G A210-GV100R005 授权问题漏洞

The H3C A210-G is a ceiling-mounted wireless access point from China's Xinhua San H3C. A security vulnerability exists in the H3C A210-G A210-GV100R005 version that stems from an access control issue that allows an attacker to authenticate without a password...