494 matches found
Information disclosure
Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor"...
Synology Media Server Server-Side Request Forgery Vulnerability
Synology Media Server provides multimedia services for browsing and playing multimedia contents in Synology NAS via DLNA/UPnP home devices. A server-side request forgery vulnerability exists in the cgi component of Synology Media Server versions prior to 1.8.3-2881. A remote attacker can exploit...
CVE-2020-18264
Cross Site Request Forgery CSRF in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=acteditmember"...
The vulnerability of the programmatically defined Cisco SD-WAN network component allows a attacker to trigger a service failure.
The vulnerability of the programmatically defined Cisco SD-WAN API component is related to resource management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the 3D CSS component in the Firefox browser, allowing attackers to perform spoofing attacks
The vulnerability of the 3D CSS component in the Firefox browser relates to the display of content outside the viewport of the web page. Exploiting this vulnerability can allow a malicious actor to perform spoofing attacks remotely...
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Core component of the Oracle VM VirtualBox software relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Google Android System Information Disclosure Vulnerability (CNVD-2021-29043)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. No details of the vulnerability are provided at this ti...
Google Android System Remote Code Execution Vulnerability (CNVD-2021-17304)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A remote code execution vulnerability exists in the System component of Google Android 8.1, 9, 10, and 11. An attacker can exploit this vulnerability to achieve...
The vulnerability of the Win32k component in Microsoft Windows operating systems, which allows attackers to increase their privileges
The vulnerability of the Win32k component in Microsoft Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Apple macOS Arbitrary File Read Vulnerability
Apple macOS is a specialized operating system developed by Apple for Mac computers. An arbitrary file read vulnerability exists in Apple macOS, which arises from an application not properly applying security restrictions within the APFS component of macOS. A local user can read arbitrary files on...
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain full control over the application.
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain full control over the application...
The vulnerability of the Letters component of the Oracle Argus Safety platform allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Letters component of the Oracle Argus Safety platform is related to deficiencies in access control. Exploiting this vulnerability could allow an intruder, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...
Vulnerability of the Server component: The stored procedures of the MySQL Server database management system, which allow a hacker to cause service interruptions.
The vulnerability of the MySQL Server database management system’s stored procedures exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to deny service to the system remotely...
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.
The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to trigger a service failure.
The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to trigger a service failure.
The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Unspecified Vulnerability in Oracle MySQL Server (CNVD-2021-04768)
Oracle MySQL is an open source relational database management system.MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Security: Roles component of Oracle MySQL Server 8.0.19 and...
Oracle MySQL Server 安全漏洞
Oracle MySQL is an open source relational database management system.MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Security: Privileges component in Oracle MySQL Server 8.0.20 an...
The vulnerability of the Core server component of Oracle WebLogic Server allows a hacker to execute arbitrary code.
The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the IIOP protocol remotely...
