totp-rs 安全漏洞

totp-rs is a tool for creating 2FA authentication tokens. A security vulnerability exists in versions of totp-rs prior to 1.1.0 that stems from the creation of 2FA authentication tokens for each time-based one-time password TOTP...

CVE-2021-45005

Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements...

CVE-2021-44927

A null pointer dereference vulnerability exists in gpac 1.1.0 in the gfsgvrmlmfappend function, which causes a segmentation fault and application crash...

netty: Request smuggling via content-length header

A flaw was found in Netty. There is an issue where the content-length header is not validated correctly if the request uses a single Http2HeaderFrame with the endstream set to true. This flaw leads to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. The...

CVE-2020-20975

In \lib\admin\action\dataaction.class.php in Gxlcms v1.1, SQL Injection exists via the $filename parameter...

Courier Mail Server 注入漏洞

Courier Mail Server is an application. A courier mail server. A security vulnerability exists in versions of Courier Mail Server prior to 1.1.5, which can be exploited by attackers to enter malicious commands after POP3 STLS commands and inject malicious commands into an encrypted user session...

AMP 输入验证错误漏洞

AMP is a software application. Used to track all issues and bugs within the CubeCoders AMP platform. A security vulnerability exists in CubeCoders AMP versions prior to 2.1.1.8, which can be exploited by attackers to cause code execution to be triggered by highly privileged users...

ofcms v1.1.4 backend existence of arbitrary file reading vulnerability

OFCMS is a content management system developed based on java technology. OFCMS v1.1.4 there are arbitrary file reading vulnerabilities in the background, the vulnerability stems from the program fails to properly validate the user data, remote attackers can use the vulnerability to read the...

Error Could not import the certificate when uploading external SSL certificate to Citrix Endpoint Management console

SSL Listener certificate might fail to import when uploading, with error "Could not import the certificate". Environment Citrix Endpoint Management version 21.1.1.3...

PT-2019-4482

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.1.1 through 1.1.1d OpenSSL versions 1.0.2 through 1.0.2t Description The issue is related to an overflow bug in the x64 64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are...

CVE-2019-2642

Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite subcomponent: User Interface. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2018-4429

A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2...

Apple iOS, macOS Mojave and tvOS Kernel Denial of Service Vulnerability

Apple iOS, macOS Mojave, and tvOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS Mojave is a specialized operating system for Mac computers; and tvOS is an operating system for smart televisions. kernel is one of the Kernel is one of the kernel components. A...

Microsoft Team Foundation Server Code Execution Vulnerability

Microsoft Team Foundation Server is a source code management, project management and team collaboration platform within the Application Lifecycle Management ALM suite of tools from Microsoft. The platform helps teams collaborate more flexibly and effectively and deliver high-quality software more...

CVE-2018-9208

Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut = v1.1Beta...

OMRON NS Device Authentication Bypass Vulnerability

OMRON NS devices is a touch screen HMI programming device from Omron. A security vulnerability exists in OMRON NS devices versions 1.1 through 1.3. A remote attacker can exploit this vulnerability by sending a direct request to an .html file to bypass authentication...

SimpleSAML php Signature Validation Bypass Vulnerability

SimpleSAMLphp is a set of PHP authentication applications that implement the SAML 2.0 service provider and identity provider features . A signature verification bypass vulnerability exists in the SimpleSAMLXMLValidator class in SimpleSAMLphp 1.14.16 and earlier versions using SAML 1.1. An attacke...

Unspecified Vulnerability in Oracle Hospitality Hotel Mobile (CNVD-2017-31691)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

CVE-2015-5381

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter to the default URI...

Moxa AWK-3131A Wireless Access Point HTTP Denial of Service Vulnerability

Moxa AWK-3131A Wireless Access Point is a wireless switch from Moxa, China.Web Application is one of the web application modules. An HTTP denial of service vulnerability exists in the Web Application feature of the Moxa AWK-3131A Wireless Access Point with firmware version 1.1. An attacker can...