5132 matches found
CGA-89H8-R9P9-82FJ
Bulletin has no description...
Linux Distros Unpatched Vulnerability : CVE-2017-15369
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The buildfilterchain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, which...
CGA-68WW-QH72-PG4V
Bulletin has no description...
PYSEC-2025-245
An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llamaindex version v0.12.19. This vulnerability allows an attacker to manipulate the refdocid parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code...
Projectworlds Online Examination System 安全漏洞
Projectworlds Online Examination System is an online examination system from Projectworlds India. A security vulnerability exists in Projectworlds Online Examination System version 1.0, which stems from an incorrect manipulation of the parameter DocID in the file /inserdocprocess.php resulting in...
CGA-9223-WHVF-RRWF
Bulletin has no description...
CVE-2023-43900
Insecure Direct Object References IDOR in EMSigner v2.8.7 allow attackers to gain unauthorized access to application content and view sensitive data of other users via manipulation of the documentID and EncryptedDocumentId parameters...
EMSigner Security Vulnerability
EMSigner is an electronic signature solution from EMSigner India. A security vulnerability exists in EMSigner version v2.8.7, which stems from a vulnerability that allows an attacker to gain unauthorized access to application content and view sensitive data of other users by manipulating the...
ONLYOFFICE 输入验证错误漏洞
Ascensio System ONLYOFFICE is an office software from Ascensio System, Latvia. A security vulnerability exists in all versions of ONLYOFFICE prior to 2021-11-08 that stems from vulnerability to improper input validation. If the document ID is known, the lack of input validation could allow an...
CVE-2020-26176
An issue was discovered in tangro Business Workflow before 1.18.1. No or broken access control checks exist on the /api/document//attachments API endpoint. Knowing a document ID, an attacker can list all the attachments of a workitem, including their respective IDs. This allows the attacker to...
MS:BB4336F5-BA8E-4A23-9F8D-040053FE425D
SQL Server 2019 RTM Cumulative Update CU 26 KB5035123...
MS:B3DB03DB-B107-4D0A-B27D-15ACAC596AC7
...
MS:CDBA2471-BE99-4137-8245-F6DBFC40F09C
...
MS:7F6BEDB4-9710-4170-A1D4-6D809EF8BAD0
...
MS:40220D99-FEB3-44AB-9029-7CF65E3CD1B9
...
MS:0F7CE746-A15D-4A3C-8278-15ABAE7C5769
...
MS:49C5D2C1-4804-495B-94C6-E870BC0DEDB5
...
MS:CBA8E722-BD94-4BD3-9E32-F66F95E5E154
...