CVE-2020-28905

Improper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to execute remote code via table pagination...

CVE-2020-18888

creationtimestamp| type| source ---|---|--- 2021-05-07 17:46:44+00:00| published-proof-of-concept| Telegram/pjy2dVNJdaQ3ohYVFEhzKW69yU3sPubERsh3wnzvFoTvnw...

CVE-2021-3038

A denial-of-service DoS vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death BSOD error. This issue impacts: GlobalProtect app 5.1 versions...

UBUNTU-CVE-2021-28658

In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability...

CVE-2021-2124

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

Oracle Virtualization 组件访问控制错误漏洞

Oracle VM VirtualBox is a cross-platform virtualization software for x86 systems. A security vulnerability exists in the Core component of Oracle VM VirtualBox versions prior to 6.1.18. An attacker could exploit the vulnerability to compromise confidentiality...

July 21, 2020—KB4559003 (OS Build 17763.1369) Preview

None None...

CVE-2020-10044

A vulnerability has been identified in SICAM MMU All versions V2.05, SICAM SGU All versions, SICAM T All versions V2.18. An attacker with access to the network could be able to install specially crafted firmware to the device...

SQL Injection Vulnerability in Laikepui E-commerce System of Hunan One Eight Network Technology Co. Ltd (CNVD-2020-25052)

Laikatui e-commerce system focuses on interface aesthetics and user experience, is an integrated e-commerce system of all the functions of the platform. Hunan One Eight Network Technology Co., Ltd. Laike push e-commerce system there is a SQL injection vulnerability, attackers can use the...

SQL Injection Vulnerability in Laikepui E-commerce System of Hunan One Eight Network Technology Co. Ltd (CNVD-2020-25312)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. There is a SQL injection vulnerability in the Laike Push e-commerce system of Hunan One Eight Network Technology Co. Ltd, which can be exploited by an attacker to obtain...

VMware Harbor Container Registry for Pivotal Platform SQL Injection Vulnerability

VMware Harbor Container Registry for Pivotal Platform is a product of VMware. A SQL injection vulnerability exists in VMware Harbor Container Registry for Pivotal Platform version 1.8 before 1.8.6 and version 1.9 before 1.9.3. The vulnerability stems from a database-based application that lacks...

March 5, 2019, update for Access 2010 (KB4018363)

March 5, 2019, update for Access 2010 KB4018363 This article describes update 4018363 for Microsoft Access 2010 that was released on March 5, 2019.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2010. It doesn't apply to th...

PT-2019-7492 · Pippin Williamson · Easy Digital Downloads

Name of the Vulnerable Software and Affected Versions: Easy Digital Downloads EDD versions 1.8.x through 1.8.6 Easy Digital Downloads EDD versions 1.9.x through 1.9.9 Easy Digital Downloads EDD versions 2.0.x through 2.0.4 Easy Digital Downloads EDD versions 2.1.x through 2.1.10 Easy Digital...

CVE-2019-7990

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7980

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2019-7972

Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability. Successful exploitation could lead to arbitrary code execution...

Linux kernel code issue vulnerability

Linux kernel is the kernel used by Linux, an open source operating system released by the Linux Foundation in the U.S. A code issue vulnerability exists in the sound/usb/line6/driver.c file in versions of Linux kernel prior to 5.1.8. The vulnerability stems from an improperly designed or...

Linux kernel code issue vulnerability (CNVD-2019-29599)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A code issue vulnerability exists in the drivers/usb/misc/sisusbvga/sisusb.c file in versions of Linux kernel prior to 5.1.8. The vulnerability stems from an improperl...

August 20, 2019 — KB4512192 Cumulative Update for .NET Framework 3.5, 4.7.2, 4.8 for Windows 10, version 1809 and Windows Server 2019

None None...

Adobe Photoshop CC Type Obfuscation Vulnerability (CNVD-2019-28666)

Adobe Photoshop, or "PS" for short, is an image processing software developed and distributed by Adobe.Photoshop CC is the Creative Cloud version of Photoshop. A type confusion vulnerability exists in Adobe Photoshop CC 19.1.8, 20.0.5 and earlier versions. An attacker can exploit this vulnerabili...