14 matches found
Drupal core 8.0.0-10.4.8,10.5.0-10.5.5,11.0.0-11.1.8,11.2.0-11.2.7 - Unauthenticated Defacement vulnerability
Unauthenticated Defacement vulnerability discovered by Kevin Quillen kevinquillen in WordPress Core Drupal versions 8.0.0-10.4.8,10.5.0-10.5.5,11.0.0-11.1.8,11.2.0-11.2.7...
Drupal core 8.0.0-10.3.12,10.4.0-10.4.2,11.0.0-11.0.11,11.1.0-11.1.2 - Authenticated Broken Access Control vulnerability
Authenticated Broken Access Control vulnerability discovered by jeff cardwell in WordPress Core Drupal versions 8.0.0-10.3.12,10.4.0-10.4.2,11.0.0-11.0.11,11.1.0-11.1.2...
PT-2023-15575 · Sipe S.R.L · Wi400
Name of the Vulnerable Software and Affected Versions: SIPE s.r.l WI400 versions 8 through 11 Description: A cross-site scripting XSS issue in the check login function allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the f parameter. This enables the...
Google Android 信息泄露漏洞
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android versions 8.1, 9, 10, and 11, which can be exploited by an attacker to cause...
Google Android 信息泄露漏洞
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the Framework component of Google Android 8.1, 9, 10, and 11. No details of the vulnerability are provided at this...
Samsung mobile devices buffer error vulnerability
Samsung mobile devices O are products of Samsung Corporation in South Korea.Samsung mobile devices O is a series of cell phones.Samsung mobile devices P is a series of mobile hard drives.Samsung mobile devices Q is a series of TVs.Samsung mobile devices Q is a series of TVs. Samsung mobile device...
CVE-2020-28340
An issue was discovered on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 software. Attackers can bypass Factory Reset Protection FRP via Secure Folder. The Samsung ID is SVE-2020-18546 November 2020...
Odoo Access Control Error Vulnerability (CNVD-2019-30600)
Odoo is an enterprise resource planning ERP and customer relationship management CRM system from Odoo Belgium. The system is developed in Python language, PostgreSQL as the database, and includes modules for sales management, inventory management, financial management and so on. An Access Control...
CVE-2018-14733
The Odoo Community Association OCA dbfilterfromheader module makes Odoo 8.x, 9.x, 10.x, and 11.x vulnerable to ReDoS regular expression denial of service under certain circumstances...
Trihedral VTScada Directory Traversal Vulnerability
Trihedral VTScada formerly known as VTS is a SCADA system from Trihedral Engineering, Canada, based on a Windows platform with a Web interface option. A directory traversal vulnerability exists in the WAP interface of Trihedral VTScada versions 8.x through 11.1.24. A remote attacker can exploit t...
PT-2016-6001 · Trihedral · Vtscada
Name of the Vulnerable Software and Affected Versions: Trihedral VTScada formerly VTS versions 8.x through 11.x before 11.2.02 Description: The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via unspecified vectors. This affec...
Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2015-07536)
Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. A memory corruption vulnerability exists in Microsoft Internet Explorer 8 through 11. This allows remote attackers to execute arbitrary code or cause a denial of service via...
Microsoft Internet Explorer elevation of privilege vulnerability (CNVD-2015-06626)
Internet Explorer is a web browser from Microsoft. A security vulnerability exists in the implementation of the broker EditWith feature in Internet Explorer versions 8-11. A remote attacker, initiated via arbitrary application DelegateExecute, can exploit this vulnerability to bypass the...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2015-04587)
Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists in Microsoft IE versions 8 through 11. A remote attacker can exploit the vulnerability to obtain...