Microsoft Windows OpenType Font Parsing 代码注入漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A code injection vulnerability exists in Microsoft Windows OpenType Font Parsing. The following products and editions are affected:Windows 10 Version 1803 for ARM64-based Systems,Windows 10...

SAP MII 代码注入漏洞

SAP MII is a software application from SAP Germany. It provides manufacturing operations management functions. SAP MII has a security vulnerability. sapmii allows users to create dashboards via SSCE Self Service Combined Environment and save them as JSPs. an attacker can intercept requests to the...

Code Injection Vulnerability in GX Works2

GX Works2 is a PLC programming software. A code injection vulnerability exists in GX Works2. An attacker can exploit this vulnerability to gain server privileges...

Panasonic Video Insight VMS Code Injection Vulnerability

Panasonic Video Insight VMS is an enterprise surveillance video management system from Panasonic Corporation Japan. A security vulnerability exists in Panasonic Video Insight VMS that could allow a remote attacker to execute arbitrary code on the target system...

SAP Business Warehouse and SAP BW/4HANA Code Injection Vulnerability

SAP Business Warehouse BW is SAP's data warehouse solution.SAP BW provides a high-performance infrastructure that helps you evaluate and interpret data. Decision makers can make informed decisions based on the analyzed data and identify target-specific activities. A code injection vulnerability...

Microsoft Visual Studio Code Code Injection Vulnerability

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. The following products and versions are affected:Visual Studio Code TS-Lint Extension...

Code Injection Vulnerability in ZDCC VisualField VxDataAnalyzer.exe Component

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A code injection vulnerability exists in the VisualField VxDataAnalyzer.exe component of ZDCC, which can be exploited by an attacker to cause a denial-of-service...

Code Injection Vulnerability in ZDCC VisualField FFHATool.exe Component

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A code injection vulnerability exists in the VisualField FFHATool.exe component of ZDCC, which can be exploited by an attacker to cause a denial-of-service attack...

Micro Focus Operation Bridge Manager Code Injection Vulnerability

Micro Focus Operation Bridge Manager is an enterprise level monitoring software from Micro Focus UK. The software uses HTML5 to visually summarize service operations. A code injection vulnerability exists in multiple versions of Micro Focus Operation Bridge Manager. The vulnerability could allow ...

Huawei EulerOS: Security Advisory for spamassassin (EulerOS-SA-2020-2118)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-8218

A code injection vulnerability exists in Pulse Connect Secure 9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface...

Mattermost Desktop App Code Injection Vulnerability

Mattermost Desktop App is a messaging desktop application from Mattermost USA. A code injection vulnerability exists in Mattermost Desktop App versions prior to 3.4.0. The vulnerability stems from a network system or product not properly filtering specific elements of externally entered data duri...

Mitsubishi Electric MC Works64 and MC Works32 Code Injection Vulnerability

The Mitsubishi Electric MC Works64 and MC Works32 are both data acquisition and monitoring systems SCADA from Mitsubishi Electric Japan. A code injection vulnerability exists in Mitsubishi Electric MC Works64 version 4.02C 10.95.208.31 and earlier versions, and MC Works32 version 3.00A 9.50.255.0...

Zenphoto Code Injection Vulnerability

Zenphoto is a content management system CMS. The Zenphoto code injection vulnerability can be exploited by an attacker to execute arbitrary PHP code...

Nextcloud Desktop Client Code Injection Vulnerability

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A code injection vulnerability exists in version 2.6.2 of Nextcloud Desktop Client for macOS-based platforms, which can be exploited by an attacker to load...

ONAP Service Design and Creation Code Injection Vulnerability (CNVD-2020-24670)

ONAP Service Design and Creation SDC is a set of visual modeling and design tools for the ONAP project. A code injection vulnerability exists in previous versions of ONAP SDNC Dublin. An attacker can exploit this vulnerability to execute arbitrary code by accessing port 4000 of the demo-sdc-sdc-b...

ONAP Service Design and Creation Code Injection Vulnerability (CNVD-2020-24672)

ONAP Service Design and Creation SDC is a set of visual modeling and design tools for the ONAP project. A code injection vulnerability exists in ONAP SDC Dublin and prior versions that stems from faulty access control. A remote attacker can exploit this vulnerability by accessing port 4001 of the...

MGASA-2020-0059 Updated python-reportlab packages fix security vulnerability

A code injection vulnerability in python-reportlab allows an attacker to execute code while parsing a color attribute. An application that uses python-reportlab to parse untrusted input files may be vulnerable to this flaw and allow remote code execution CVE-2019-17626...

RHEL 7 : python-reportlab (RHSA-2020:0195)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0195 advisory. Python-reportlab is a library used for generation of PDF documents. Security Fixes: python-reportlab: code injection in colors.py allows attacker to...

Apache Solr Code Injection Vulnerability

Apache Solr is the United States Apache Apache Software Foundation of a Lucene a full-text search engine based on the search server . The product supports level search , vertical search , highlighting search results and so on. A code injection vulnerability exists in Apache Solr versions 5.0.0...