8998 matches found
Code injection
IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190450...
Rapid7 Announces Release of New tCell Amazon CloudFront Agent
Cloud-native approaches to building, hosting, and delivering web applications are growing rapidly. Content delivery networks CDNs such as Amazon CloudFront are on the rise, pushing content closer to end users to improve the performance of web applications. To protect web applications security tea...
SQL injection vulnerability in the open source version of UX365 website navigation
Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of the existence of SQL injection vulnerability . Attackers can exploit the vulnerability to...
[SECURITY] Fedora 33 Update: python-pillow-7.2.0-5.fc33
Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...
Amazon ECS Exec Now Works with Containers in AWS Fargate
Building in containers offers amazing benefits for development teams – speed, agility, flexibility, scalability, etc...
XSS vulnerability in the open-source version of UX365 website navigation
Youkai 365 Web site navigation open source version is an open source web site based on PHP + MYSQL development and construction of category management system . Uke 365 URL navigation open source version of the existence of XSS vulnerabilities , attackers can exploit the vulnerability to obtain us...
[SECURITY] Fedora 32 Update: python-django-3.0.13-1.fc32
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
CVE-2021-28361
An issue was discovered in Storage Performance Development Kit SPDK before 20.01.01. If a PDU is sent to the iSCSI target with a zero length but data is expected, the iSCSI target can crash with a NULL pointer dereference...
CVE-2021-28361
CVE-2021-28361 affects Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with zero length (but data is expected), the iSCSI target can crash due to a NULL pointer dereference, impacting availability (CVSS v3.1: High). The issue is tied to SPDK’s iSCS...
SQL Injection Vulnerability in the Enterprise Management System for Building Materials of Xiangyang Softpro Information Technology Co.
Ltd. is located in Room 2-2712, Jinxiu Tianchi SOHO-A1 Building, Checheng Road, High-tech Zone, Xiangyang City, Hubei Province, is a high-tech enterprise specializing in software development, mobile software customization, software sales and implementation. Ltd.'s Softpro Building Materials...
Storage Performance Development Kit 代码问题漏洞
Storage Performance Development Kit SPDK is a storage performance development kit from the SPDK community. The product is primarily used for writing high-performance, scalable user-mode storage applications. A security vulnerability exists in Storage Performance Development Kit before 20.01.01,...
QCubed 3.1.1 SQL Injection Vulnerability
QCubed SQL Injection ================== | Target: | QCubed Framework | | Vendor: | QCubed | | Version: | all versions including 3.1.1 | | CVE: | CVE-2020-24913 | | Accessibility: | Remote | | Severity: | Critical | | Author: | Wolfgang Hotwagner AIT Austrian Institute of Technology | SUMMARY...
[SECURITY] Fedora 33 Update: python-django-3.0.13-1.fc33
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
Security Update for Microsoft Visual Studio Code Quantum Development Kit Extension (March 2021)
Microsoft Quantum Development Kit for Visual Studio Code could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the...
CVE-2021-27082
Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-27082
Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability...
Remote code execution
Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability...
CVE-2021-27082 Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability
...
CVE-2021-27083
CVE-2021-27083 : The vulnerability affects the Visual Studio Code Remote Development Extension . Exploitation could allow a remote attacker to execute arbitrary code on a victim’s system by persuading them to open specially crafted content. This is supported by multiple sources in the connected d...