编号撤回

libsolv is a library for checking package dependencies. libsolv has a security vulnerability, and no details of the vulnerability are currently provided...

showdoc 代码问题漏洞

showdoc is an open source tool ideal for IT teams to share documents online. showdoc suffers from a code issue vulnerability that stems from unrestricted uploading of files with dangerous types. No details of the vulnerability are currently available...

LiveConfig 路径遍历漏洞

LiveConfig is a control panel software from the German company LiveConfig. It is used to simplify server configuration and ensure reliable and secure operation. A security vulnerability exists in LiveConfig version 2.12.2, which can be exploited by an attacker to read files on the underlying serv...

编号撤回

This CVE number has been withdrawn...

Jeecg-Boot SQL注入漏洞

Jeecg-Boot is a low-code platform based on the code generator from the JeecgBoot community. Jeecg-boot is vulnerable to SQL injection, which stems from a code parameter in /sys/user/queryUserComponentData that was found to be vulnerable to SQL injection. No detailed vulnerability details are...

Fulusso 跨站脚本漏洞

Fulusso is a single sign-on system developed based on React + Asp.net Core. A security vulnerability exists in Fulusso v1.1, which originates from a DOM-based cross-site scripting XSS vulnerability contained in /BindAccount/SuccessTips.js. An attacker could exploit the vulnerability to inject...

MediaTek 芯片安全漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Corporation Mediatek. A security vulnerability exists in the MediaTek chips, which is caused by a logic error and possible memory corruption...

MediaTek 芯片安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called Mediatek. The MediaTek chips contain a security vulnerability that could lead to information leakage...

Dotnet 代码问题漏洞

Dotnet is an open source http web framework. A code issue vulnerability exists in Dotnet that stems from an error in the HTTP header of the product's ASP.NET Core Krestel component. An attacker could cause a denial of service via this vulnerability...

Microsoft Outlook安全特征问题特征问题漏洞

Microsoft Outlook for Mac is a Mac-based email client software bundled with the Office suite from Microsoft Corporation. The software manages email, contacts, calendars, etc. Microsoft Outlook for Mac has a security vulnerability for which no detailed vulnerability details are available...

radare2 缓冲区错误漏洞

radare2 is a set of libraries and tools for working with binary files. radareorg Radare2 suffers from a buffer overflow vulnerability that stems from the product's failure to effectively determine memory boundaries, which could be exploited by an attacker to cause a buffer overflow...

Xmpie Ustore 授权问题漏洞

Xmpie Ustore is a network printing solution from Xmpie USA. An authorization issue vulnerability exists in XMPie uStore that stems from the product allowing access to the application to steal database information via the included default administrative credentials. The following products and...

Zephyr 缓冲区错误漏洞

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. A buffer error vulnerability exists in Zephyr that stems from a failure of the product's usb device to properly handle memory boundaries. An attacker could cause a buffer overflow through this...

Google Tensorflow 安全漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc...

Wire 安全漏洞

Wire is a chat software from a personal developer. The software supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, can make voice calls, send photos, and its original way of saying hello, PING. wire webapp has a security vulnerability, and no details of the vulnerability...

taoCMS 安全漏洞

Taocms is a micro Cms content management system in China.TaoCMS has an arbitrary file reading vulnerability that can be exploited by attackers via admin.php?action=file & ctrl=download & path=... /... /1.txt to read any file...

编号撤回

This CVE number has been withdrawn...

Google TensorFlow 安全漏洞

TensorFlow is an end-to-end open-source platform for machine learning from Google. Google TensorFlow has a security vulnerability that can be exploited by attackers to cause a denial of service...

dolibarr 安全漏洞

Dolibarr is a software application. A modern software package that helps manage your organization's activities. A security vulnerability exists in dolibarr 16.0, details of the vulnerability are not available at this time, please follow the manufacturer's website or CNNVD for follow-up informatio...

Samba 缓冲区错误漏洞

Samba is the standard Windows interoperability program suite for Linux and Unix. A security vulnerability exists in Samba that stems from a lack of proper validation of the length of user-supplied data before copying it into a fixed-length heap-based buffer. An attacker could exploit this...