Directus 安全漏洞

Directus is a real-time Api and application dashboard open-sourced by Directus. It is used to manage Sql database content. A security vulnerability exists in Directus versions prior to 9.0.0 through 11.9.0, which stems from WebHook triggering the logging of sensitive data, which could lead to...

CVE-2021-0704

In createNoCredentialsPermissionNotification and related functions of AccountManagerService.java, there is a possible way to retrieve accounts from the device without permissions due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges...

SUSE CVE-2013-0608

Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allow attackers to execute arbitrary code via unspecified vectors, related to a "logic error," a different vulnerability than CVE-2013-0607, CVE-2013-0611, CVE-2013-0614, and CVE-2013-0618...

Google Android 信息泄露漏洞

Google Android is a Linux-based open-source operating system from the U.S. company Google Google. information disclosure vulnerabilities exist in Google Android 9, 10 and 11. The vulnerability arises from the retrieval of accounts in devices with permissions due to permission bypass in the...

Google Android 安全漏洞

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the System component of Google Android versions 9, 10, and 11, which could be exploited by an attacker to cause a local...

Google Android 输入验证错误漏洞

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. a denial-of-service vulnerability exists in the System component of Google Android versions 9, 10 and 11, which could be exploited by attackers to cause a denial of service...

Google Android 代码问题漏洞

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the Media Framework component of Google Android versions 9, 10, and 11. No detailed vulnerability details are available...

VulnCheck KEV: CVE-2018-0955

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

CVE-2020-14258

HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the client. Versions 9, 10 and 11 are affected...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2019-35567)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in Microsoft IE 9, 10, and 11, which arises from a program's failure to properly access memory objects and can be exploite...

Odoo Information Disclosure Vulnerability

Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language with PostgreSQL as database and includes modules for sales management, inventory management, financial management and so on. An information...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2019-18615)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in Microsoft IE 11, 10, and 9, which can be exploited by an attacker to execute arbitrary code in the context of the curre...

CVE-2018-0988

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2018-06762)

Microsoft Internet Explorer is a popular WEB browser. An information disclosure vulnerability exists in Microsoft IE 9, 10, and 11, which arises from the program failing to properly handle objects in memory. An attacker could exploit the vulnerability to obtain information...

Kentico CMS Arbitrary Code Execution Vulnerability

Kentico CMS is an enterprise-grade web content management system and customer experience management system. An arbitrary code execution vulnerability exists in Kentico CMS versions 9 through 11, which can be exploited by an authenticated, remote attacker to edit and update ascx code...

PT-2018-17947

Name of the Vulnerable Software and Affected Versions Kentico versions 9 through 11 Description A Reflected Cross-Site Scripting issue allows remote attackers to execute malicious JavaScript via a malicious devicename parameter in a link entered through specific screens, including "Pages - Edit...

Microsoft Windows Internet Explorer Remote Code Execution Vulnerability (CNVD-2017-37103)

Microsoft Windows 7 SP1 and others are a series of operating systems from Microsoft Corporation, U.S.A. Internet Explorer IE is one of the web browsers that comes with the Windows operating system. A remote code execution vulnerability exists in versions 9, 10, and 11 of IE in Microsoft Windows...

Microsoft Internet Explorer Scripting Memory Corruption Vulnerability

Microsoft Windows Server 2016 and others are operating systems released by Microsoft Corporation USA.Internet Explorer IE is one of the browsers. scripting engine is one of the scripting engines. A memory corruption vulnerability exists in the scripting engine in IE versions 9, 10 and 11 in...

OpenStack Horizon Cross-Site Scripting Vulnerability (CNVD-2017-05503)

OpenStack is a cloud platform management project. Horizon is a dashboard project that provides users and administrators with a web-based user interface for managing OpenStack services. A cross-site scripting vulnerability exists in OpenStack Horizon versions 9.x through 9.1.1, 10.x through 10.0.2...

CVE-2017-0009

Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0011, CVE-2017-0017, CVE-2017-0065,...