495 matches found
Avaya Aura Device Services 代码问题漏洞
Avaya Aura Device Services is a software application from Avaya, Inc. It provides a feature for managing Avaya endpoints. A security vulnerability exists in Avaya Aura Device Services Web that stems from the presence of a command injection vulnerability. An attacker could exploit the vulnerabilit...
Microsoft Graphics Component 安全漏洞
Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are affected:Microsoft Office 201...
CVE-2023-34603
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController...
CVE-2023-34833
An arbitrary file upload vulnerability in the component /api/upload.php of ThinkAdmin v6 allows attackers to execute arbitrary code via a crafted file...
CVE-2023-33761
eMedia Consulting simpleRedak up to v2.47.23.05 was discovered to contain a reflected cross-site scripting XSS vulnerability via the component /view/cb/format642.php...
Privilege escalation
An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file...
CVE-2023-30333
An arbitrary file upload vulnerability in the component /admin/ThemeController.java of PerfreeBlog v3.1.2 allows attackers to execute arbitrary code via a crafted file...
Privilege escalation
An arbitrary file upload vulnerability in the component /admin/ajax.php?action=savemenu of Online Food Ordering System v2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...
Stored cross site scripting in Microbin
A cross-site scripting vulnerability XSS in the component microbin/src/pasta.rs of Microbin v1.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2015-10105 IP Blacklist Cloud Plugin CSV File Import ip_blacklist_cloud.php valid_js_identifier path traversal
A vulnerability, which was classified as critical, was found in IP Blacklist Cloud Plugin up to 3.42 on WordPress. This affects the function validjsidentifier of the file ipblacklistcloud.php of the component CSV File Import. The manipulation of the argument filename leads to path traversal. It i...
matrix-react-sdk 注入漏洞
matrix-react-sdk is a Matrix open source component for inserting the Matrix chat/voip client into web pages. matrix-react-sdk version 3.71.0 before the injection vulnerability , the vulnerability stems from the inclusion of HTML tags in the search results of plain text messages will be rendered a...
Arbitrary file deletion
go-bbs v1 was discovered to contain an arbitrary file download vulnerability via the component /api/v1/download...
Sql injection
bloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index.php?mode=content&page=pages&action=edit&eid=1...
PT-2023-17540 · Mediatek +3 · Mt5221 +3
Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: In the wlan component, there is a possible out of bounds read due to a missing bounds check. This could lead to local information...
Appwrite 代码问题漏洞
Appwrite is Appwrite open source an end-to-end backend server . Used to package into a set of Docker microservices for web, mobile, native or backend applications. A security vulnerability exists in Appwrite v1.2.1 and earlier versions , which stems from the discovery of a contained server-side...
Arbitrary file deletion
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /accessory/picdel.html...
CVE-2023-27701
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...
The vulnerability of the Windows Accounts Picture component of the Windows operating system allows attackers to increase their privileges.
The vulnerability of the Windows Accounts Picture component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...