Apache Airflow Access Control Error Vulnerability (CNVD-2023-70279)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An Access Control Error vulnerability exists in Apache Airflow versions prior to...

FreeImage ofLoad function buffer overflow vulnerability (CNVD-2023-67120)

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage ofLoad function, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service attack...

FreeImage FreeImage_Load function buffer overflow vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage FreeImageLoad function. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service...

Arbitrary File Read Vulnerability in DPtech SSL VPN of Hangzhou Dipu Technology Co.

Ltd. is a high-tech enterprise integrating R&D, production and sales in the field of network, security and application delivery. Ltd. DPtech SSL VPN suffers from an arbitrary file read vulnerability, which can be exploited by attackers to obtain sensitive information...

Online Travel Agency System article_edit.php File SQL Injection Vulnerability

Online Travel Agency System is an online travel agency system. A SQL injection vulnerability exists in Online Travel Agency System v1.0, which originates from a lack of validation of the articleedit.php parameter pageid against an externally-entered SQL statement. An attacker can exploit this...

MOXA TN-4900 and TN-5900 Command Injection Vulnerability (CNVD-2023-64095)

MOXA TN-4900 is a series of industrial firewall routers from MOXA, China.MOXA TN-5900 is a series of industrial firewall routers from MOXA, China. A command injection vulnerability exists in the MOXA TN-4900 and TN-5900, which can be exploited by an attacker to execute remote code on an affected...

MOXA TN-5900 Command Injection Vulnerability (CNVD-2023-64099)

MOXA TN-5900 is a series of industrial firewall routers from China MOXA. The MOXA TN-5900 suffers from a command injection vulnerability that can be exploited by an attacker to execute remote code on an affected device...

MOXA TN-4900 and TN-5900 Command Injection Vulnerability (CNVD-2023-64097)

MOXA TN-4900 is a series of industrial firewall routers from MOXA, China.MOXA TN-5900 is a series of industrial firewall routers from MOXA, China. A command injection vulnerability exists in the MOXA TN-4900 and TN-5900, which can be exploited by an attacker to delete arbitrary files...

MOXA TN-4900 and TN-5900 Command Injection Vulnerability (CNVD-2023-64094)

MOXA TN-4900 is a series of industrial firewall routers from MOXA, China.MOXA TN-5900 is a series of industrial firewall routers from MOXA, China. A command injection vulnerability exists in the MOXA TN-4900 and TN-5900, which can be exploited by an attacker to delete arbitrary files...

ASUSTOR Data Master Command Injection Vulnerability

ASUSTOR Data Master is a specialized operating system on ASUSTOR NAS from ASUS, China. ASUSTOR Data Master suffers from a command injection vulnerability that stems from the Printer service feature failing to properly filter constructed command special characters, commands, etc. The vulnerability...

Juniper Networks Junos OS EX Access Control Error Vulnerability

Juniper Networks Junos OS EX is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS EX is vulnerable to an access control error vulnerability that arises from the...

MOXA TN-4900 and TN-5900 Command Injection Vulnerability (CNVD-2023-64096)

MOXA TN-4900 is a series of industrial firewall routers from MOXA, China.MOXA TN-5900 is a series of industrial firewall routers from MOXA, China. A command injection vulnerability exists in the MOXA TN-4900 and TN-5900, which can be exploited by an attacker to execute remote code on an affected...

MOXA TN-5900 Command Injection Vulnerability (CNVD-2023-64100)

MOXA TN-5900 is a series of industrial firewall routers from China MOXA. The MOXA TN-5900 suffers from a command injection vulnerability that can be exploited by an attacker to execute remote code on an affected device...

WordPress Booking Manager plugin server-side request forgery vulnerability

Linux Kernel Memory Misreference Vulnerability CNVD-2023-65164...

Dell PowerScale OneFS Protection Mechanism Bypass Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A protection mechanism bypass vulnerability exists in Dell PowerScale OneFS, which can be exploited by attackers to cause denial of service, information disclosur...

Command Execution Vulnerability in JeecgBoot of Beijing Oberweis Technology Co.

JeecgBoot is an enterprise-grade, low-code platform. JeecgBoot has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Linux Kernel Memory Misreference Vulnerability (CNVD-2023-65164)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux Kernel suffers from a memory misreference vulnerability that originates from a confusion in the instruction responsible for freeing memory in the vmxnet3rqallocrxbuf,...

Dell PowerScale OneFS elevation of privilege vulnerability (CNVD-2023-65220)

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS, which can be exploited by an attacker to elevate privileges...

Command Execution Vulnerability in TL-FW5600 and TL-FW6300 of P&L Technologies Ltd.

The TL-FW5600 and TL-FW6300 are firewall products from P&L Technologies. A command execution vulnerability exists in the TL-FW5600 and TL-FW6300 from P&L Technologies Ltd. that can be exploited by an attacker to execute arbitrary system commands...

Google Chrome Data Forgery Problem Vulnerability (CNVD-2023-65156)

Google Chrome is a web browser from Google, an American company. A data forgery issue vulnerability exists in Google Chrome prior to version 116.0.5845.96, which stems from insufficient data validation of Systems Extensions, and can be exploited by a remote attacker to bypass file restrictions vi...