PT-2019-6946

Name of the Vulnerable Software and Affected Versions RHQ Mongo DB Drift Server versions prior to 2013-09-25 Description A temporary file vulnerability exists when unpacking zipped files, potentially allowing for insecurity. Recommendations For versions prior to 2013-09-25, at the moment, there i...

Red Hat OpenShift Input Validation Error Vulnerability

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. An input validation error vulnerability in the cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh file in Red Hat...

SQL Injection Vulnerability in ab***.php of Ebay's website builder system

Ltd. is a brand of Jinan Dotchuang Network Technology Co., Ltd, which is a professional provider and operator of high-tech network and software technology services in Shandong Province. There is a sql injection vulnerability in ab.php, which can be exploited by attackers to obtain sensitive...

CVE-2013-4374: Exposure of Resource to Wrong Sphere

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files...

CVE-2013-0180

Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds...

CVE-2013-0178

Insecure temporary file vulnerability in Redis before 2.6 related to /tmp/redis-%p.vm...

USN-4172-2 file vulnerability

USN-4172-1 fixed a vulnerability in file. This update provides the corresponding update for Ubuntu 12.04 ESM Ubuntu 14.04 ESM. Original advisory details: It was discovered that file incorrectly handled certain malformed files. An attacker could use this issue to cause a denial of service, or...

Ubuntu 16.04 LTS / 18.04 LTS : file vulnerability (USN-4172-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4172-1 advisory. It was discovered that file incorrectly handled certain malformed files. An attacker could use this issue to cause a denial of service, or possibly...

USN-4171-1 apport vulnerabilities

Kevin Backhouse discovered Apport would read its user-controlled settings file as the root user. This could be used by a local attacker to possibly crash Apport or have other unspecified consequences. CVE-2019-11481 Sander Bos discovered a race-condition in Apport during core dump creation. This...

TerraMaster FS-210 Elevation of Privilege Vulnerability

TerraMaster FS-210 is a NAS Network Attached Storage device from TerraMaster, a Shenzhen, China based company. An elevation of privilege vulnerability exists in TerraMaster FS-210 version 4.0.19, which can be exploited to elevate privileges with the help of the 1.user.php file...

SQL injection vulnerability in ad***_jq***.php file de*** method in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adjq.php file de method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in ad***_ne***.php file re*** method in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adne.php file re method there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in seacms backend ad***_ma***.php file

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adma.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL injection vulnerability in ad***_to***.php file en*** parameter in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adto.php file en parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in LJCMS us***.php File

LJCMS is a free and open source content management system. A SQL injection vulnerability exists in the LJCMS us.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

Tooonyy dormsystem SQL Injection Vulnerability

Tooonyy dormsystem is a dormitory information management system. A SQL injection vulnerability exists in the admin.php file in versions 1.3 and earlier of Tooonyy dormsystem, which stems from a lack of validation of externally-entered SQL statements in database-based applications and can be...

WordPress Arforms Plugin Input Validation Error Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.ARforms is a responsive form builder plugin used in it. An input validation error vulnerability exists in the 'arfdeletefile' function ...

Arbitrary File Deletion Vulnerability in RGCMS Fi***.php File

RuiGu information management system RGCMS is a set of open source building management system, using PHP language, written in the framework of Thinkphp5.1.+, the database using MYSQL database. RGCMS Fi.php file exists in any file deletion vulnerability, an attacker can use this vulnerability to...

Vanno enterprise website management system backend file contains a vulnerability

Fanno enterprise website management system is a website construction system developed by Cangzhou City Fanno Advertising Media Co. Vanno enterprise website management system background file contains a vulnerability that can be exploited by attackers to obtain administrator privileges...

PT-2019-6426 · Ruijie · Ruijie Eg-2000Se

Name of the Vulnerable Software and Affected Versions: Ruijie EG-2000SE versions 11.9 B11P1 Description: The issue is related to the upload.php script in the Ruijie EG-2000SE gateway, specifically with the UploadFile class. It allows for unrestricted file upload of dangerous file types. An attack...