Espressif ESP-IDF 代码注入漏洞

Espressif ESP-IDF is an Internet of Things IoT development framework from China's Loxin Information Technology Espressif. A code injection vulnerability exists in the Espressif ESP-IDF that stems from the Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier versions not properly...

ZOHO ManageEngine Log360 跨站请求伪造漏洞

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity and comply with regulatory requirements.A code injection...

opensysusers 代码注入漏洞

opensysusers is an open source package. It is an alternative implementation of systemd-sysusers that can be run on systems with or without systemd installed. A code injection vulnerability exists in versions of opensysusers prior to 0.6, which poses a security risk primarily due to the use of...

IBM DataPower Gateway 跨站请求伪造漏洞

IBM DataPower Gateway is a set of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interface API, web, service-oriented architecture SOA, B2B and cloud workloads. The platform protects, integrates, and optimizes access across channel...

PT-2021-24125

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager Cloud Service Appliance EPM CSA affected versions not specified Description: A code injection vulnerability in the Ivanti EPM Cloud Services Appliance CSA allows an unauthenticated user to execute arbitrary code with...

Microsoft Windows 代码注入漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows. The following products and versions are affected:Windows Server 2016,Windows Server 2016 Server Core installation,Windows 8.1 f...

Microsoft Graphics Component 代码注入漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Graphics Component. The following products and versions are affected: Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windows Server 201...

Microsoft Dynamics 代码注入漏洞

Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A code injection vulnerability exists in Microsoft Dynamics. The following products an...

Huawei HarmonyOS 代码注入漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS A code injection vulnerability exists in some Huawei products. No information about this vulnerability is available at this time, please sta...

Microsoft Exchange Server 代码注入漏洞

Microsoft Exchange Server is a mail server and calendar server developed by Microsoft. A remote code execution vulnerability exists in Microsoft Exchange Server. An attacker could exploit this vulnerability to achieve remote code execution...

Huawei HarmonyOS 代码注入漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS Phones and Tablets A code injection vulnerability exists in some Huawei products. Successful exploitation of this vulnerability may result i...

WebPort Code Injection Vulnerability

Philips Tasy WebPortal is a Web-based portal system from Philips Europe Philips. A code injection vulnerability exists in WebPort, which stems from WebPort version 1.19.1 and earlier versions that can be exploited by an attacker to gain control of the server...

Shopware Cross-Site Scripting Vulnerability (CNVD-2021-45749)

Shopware is an open source e-commerce platform. A cross-site scripting vulnerability exists in Shopware versions prior to 5.6.10. An attacker can exploit this vulnerability to inject malicious script into Administration to execute client-side code...

Microsoft 3D Viewer 代码注入漏洞

Microsoft 3D Viewer is a simplified and fast graphics editing application from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft 3D Viewer. The following products and versions are affected: 3D Viewer...

Microsoft Paint 3D 代码注入漏洞

Paint 3D is a free creative app that comes with Windows 10 and supports users in creating creative projects using 2D and 3D tools. Microsoft Paint 3D suffers from a remote code execution vulnerability that can be exploited by an attacker to execute code on the target host...

Microsoft Office 代码注入漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code injection vulnerability exists in Microsoft Office. The following products and edition...

Microsoft Office SharePoint 代码注入漏洞

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

Microsoft Common Utilities 代码注入漏洞

Microsoft Common Utilities is an application from Microsoft USA. NET class hierarchy that supports all classes in the .NET class hierarchy and provides low-level services for derived classes. A code injection vulnerability exists in Microsoft Common Utilities. The following products and versions...

SAP Business One 注入漏洞

SAP Business One is a suite of enterprise management software from SAP, a German company. SAP Business One Hana Chef Cookbook contains a code injection vulnerability that could be exploited to inject code that can be executed by the application...

Microsoft Visual Studio Code 代码注入漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Visual Studio Code. An attacker can exploit this vulnerability to remotely execute code...