CVE-2020-36195 SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...

Qnap Systems QNAP NAS running Multimedia Console SQL注入漏洞

Qnap Systems QNAP NAS running Multimedia Console is an application from China Weilian Qnap Systems. A multimedia console. A security vulnerability exists in QNAP NAS running Multimedia Console, which can be exploited by an attacker to obtain application information...

CVE-2020-36195

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...

The vulnerability of the Console Driver service (condrv) of Microsoft Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Console Driver service in Microsoft Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Windows and Windows Server Denial of Service Vulnerability (CNVD-2021-71950)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. A denial of service vulnerability exists in the "console driver" in Microsoft Windows and Windows Server,...

CVE-2021-28443

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28438

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28438

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28443

Windows Console Driver Denial of Service Vulnerability...

Denial of service

Windows Console Driver Denial of Service Vulnerability...

Denial of service

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28443

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28438

Windows Console Driver Denial of Service Vulnerability...

CVE-2021-28443

Technical details about CVE-2021-28443 (affected Windows Console Driver DoS) are not provided in the connected documents. No product/version/root-cause/exploit or remediation details are disclosed here; monitor for official updates.

CVE-2021-28443 Windows Console Driver Denial of Service Vulnerability

...

CVE-2021-28438

Technical details (affected component, root cause, impacted versions, or exploit info) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2021-28973

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks...

Input validation

The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks...

@theia/debug (>=1.1.0-next.14531578, <=1.8.0-next.fea40a2c), @theia/plugin-dev (>=1.1.0-next.14531578, <=1.8.0-next.fea40a2c) +4 more potentially affected by CVE-2021-28161 via @theia/console (>=1.1.0-next.a62a6b92, <=1.8.0-next.61200efc)

@theia/console NPM version =1.1.0-next.a62a6b92, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.1.0-next.14531578, =1.8.0-next.fea40a2c Source cves: CVE-2021-28161 Source advisory: OSV:GHSA-CWG9-C9CR-P5FQ...

GHSA-CWG9-C9CR-P5FQ Improper Neutralization of Input in Theia console

In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected...