Google Chromium 跨站脚本漏洞

Google Chromium is an open source web browser from Google, Inc. Google Chromium suffers from a cross-site scripting vulnerability that could lead to the execution of arbitrary code, denial of service, or information disclosure...

chafa 代码问题漏洞

chafa is a command line utility program for individual developers. A security vulnerability exists in chafa that allows an attacker to cause a denial of service via a crafted input file...

编号撤回

This CVE number has been withdrawn...

Monstaftp 代码问题漏洞

Monstaftp is a modern Web interface for FTP. version v2.10.3 of Monstaftp is vulnerable to server-side request forgery, which stems from the product's failure to properly validate user input and can be exploited by attackers to probe server intranet resources...

HongCMS 路径遍历漏洞

HongCMS is an open source lightweight content management system CMS. A security vulnerability exists in HongCMS version 3.0.0, which originates from the deletion of arbitrary files via the component /admin/index.php/template/ajax?action=delete...

NI Web Server 跨站脚本漏洞

NI Web Server is a web server from NI China. A security vulnerability exists in NI Web Server. No information about the vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

next-auth 输入验证错误漏洞

next-auth is a complete open source authentication solution for Next.js applications. A security vulnerability existed in next-auth before 3.29.2, there is no information about the vulnerability at this time, please keep checking CNNVD or vendor announcements...

snipe-it 跨站脚本漏洞

Snipe-IT is an open source IT asset/license management system. snipe-IT has a security vulnerability that can be exploited by attackers to steal user cookies...

编号撤回

This CVE number has been withdrawn...

Cisco IOS XE Software 路径遍历漏洞

Cisco IOS XE Software is an operating system from Cisco, Inc. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. A path traversal vulnerability exists in Cisco IOS XE. Multiple vulnerabilities can b...

Exploit for Missing Authentication for Critical Function in Terra-Master Terramaster_Operating_System

It is an exploit module for CVE-2022-24990, a TerraMaster TOS Un...

MinIO 安全漏洞

MinIO is an open source object storage server from MinIO, Inc. The product supports building infrastructure for machine learning, analytics, and application data workloads.MinIO has an authorization issue vulnerability that could be exploited by an attacker to elevate privileges to those of a roo...

Adobe Photoshop 缓冲区错误漏洞

Adobe Photoshop is a set of image processing software from Adobe. Adobe Photoshop is vulnerable to an out-of-bounds write vulnerability. An attacker could exploit this vulnerability to execute arbitrary code in the context of the current user...

Samsung SMR 授权问题漏洞

Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR contains a security vulnerability that could be exploited by an attacker to use the locked Myfiles application without authentication...

Zyxel AP Configurator 安全漏洞

The Zyxel AP Configurator ZAC is an AP Configurator from China-based Hopkins Technology Zyxel. It enables resellers to complete the process of configuring multiple APs as well as future maintenance of standalone APs. A security vulnerability exists in Zyxel AP Configurator ZAC version 1.1.4, whic...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. A security vulnerability exists in Google Chrome that originates from the presence of post-release reuse in the Software tab group...

fullpage.js 安全漏洞

fullPage.js is an easy-to-use library for creating full-screen scrolling websites also known as single-page websites or mono-page websites and adding horizontal sliders to various parts of the website. A security vulnerability previously existed in fullpage.js version 4.0.2, which stemmed from...

zbzcms SQL注入漏洞

zbzcms Station Helper CMS is a content management website of China Station Helper CMS zbzcms Inc. zbzcms version 1.0 has a SQL injection vulnerability, which originates from a SQL injection vulnerability found through the id parameter of /php/ajax.php. No detailed vulnerability details are...

InHand Networks InRouter 900 操作系统命令注入漏洞

The InHand Networks InRouter 900 is a series of industrial routers from InHand Networks, U.S.A. A security vulnerability exists in the InHand Networks InRouter 900 Industrial 4G Router, and no details of the vulnerability are currently available...

libsixel 资源管理错误漏洞

libsixel is a package that provides encoding/decoding implementations for DEC SIXEL graphics and other converter programs. A resource management error vulnerability exists in libsixel version 1.10.0, which stems from the presence of post-release reuse in libsixel/src/dither.c:379. An attacker cou...