3989 matches found
GNU SASL 缓冲区错误漏洞
GNU SASL is a GNU community implementation of the Simple Authentication and Security Layer SASL framework and some common SASL mechanisms. A security vulnerability exists in GNU SASL versions prior to 2.0.1 that stems from. Server-side out-of-bounds reads to maliciously authenticated GSS-API...
CVE-2021-44170
A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS before 7.0.4 and FortiProxy before 2.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...
CVE-2022-2400
External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...
CVE-2022-32450
AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own %APPDATA% folder used for ad.trace and chat but the product runs as SYSTEM when writing chat-room data there...
WordPress plugin Very Simple Breadcrumb 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
Product Show Room Site SQL注入漏洞
Product Show Room Site is a kind of product show room website by Carlo Montero's personal developer. product show room site v1.0 version exists SQL injection vulnerability, the vulnerability originates from the existence of the id parameter in /psrs/?p=products/viewproduct&id SQL injection, an...
SAP Business One 代码问题漏洞
SAP Business One is a set of enterprise management software from SAP. The software includes functions such as financial management, operations management and human resource management. A denial-of-service vulnerability exists in SAP Business One version 10.0, which stems from improper input clean...
Hotel Management System 跨站脚本漏洞
Hotel Management System is a hotel management system based MIS project by Prem Chand Saini, an individual developer in India. A cross-site scripting vulnerability exists in Hotel Management System version 2.0. An attacker could exploit this vulnerability to conduct a cross-site scripting attack...
Hotel Management System 跨站脚本漏洞
Hotel Management System is a hotel management system based MIS project by Prem Chand Saini, an individual developer in India. A cross-site scripting vulnerability exists in Hotel Management System version 2.0. An attacker could exploit this vulnerability to conduct a cross-site scripting attack...
GHSA-P64X-8RXX-WF6Q Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected...
CVE-2022-2287
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0...
AZL-10015 CVE-2022-2285 affecting package vim for versions less than 9.0.0050-2
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0...
CVE-2022-2285
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0...
Vim 安全漏洞
Vim is a cross-platform text editor. A security vulnerability exists in versions prior to Vim 9.0 that stems from the presence of a heap-based buffer overflow...
CVE-2022-2264
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...
ALPINE-CVE-2022-2264
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0...
AZL-10013 CVE-2022-2257 affecting package vim for versions less than 9.0.0050-2
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0...
CVE-2017-20124
A vulnerability classified as critical has been found in Online Hotel Booking System Pro Plugin 1.0. Affected is an unknown function of the file /front/roomtype-details.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has...
CVE-2021-3779
A malicious MySQL server can request local file content from a client using ruby-mysql prior to version 2.10.0 without explicit authorization from the user. This issue was resolved in version 2.10.0 and later...