1732 matches found
SQL injection vulnerability in admin_datarelate.php page of DuomiCms movie and TV management system
DuomiCms is a video-on-demand system designed for film and television station owners. A SQL injection vulnerability exists in the admindatarelate.php page of the Duomi DuomiCms Movie and TV Management System x3.0UTF8Official Edition. An attacker can exploit the vulnerability to obtain sensitive...
Mozilla Firefox Security Advisories (MFSA2018-02, MFSA2018-03) - Windows
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
SQL Injection Vulnerability in the Enterprise Website System of Zhongshan Tengning Network Technology Co.
Zhongshan TENNING Network Technology Co., Ltd. is a professional and technical company focusing on enterprise website construction, promotion, WeChat development, focusing on providing SMEs with the most cost-effective website building services. TENNING Network Technology Co., Ltd. corporate...
Microsoft Windows Multiple Vulnerabilities (KB4056897)
This host is missing an important security update according to Microsoft KB4056897 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB4056898)
This host is missing an important security update according to Microsoft KB4056898 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
SQL Injection Vulnerability in Diyou p2p Lending System V4.1
Diyou P2P lending system is a cloud-based p2p lending system, p2p lending program software and online financial investment system. A SQL injection vulnerability exists in emperor friend p2p lending system V4.1, the vulnerability is due to the program failing to effectively filter the data submitt...
Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2018-00751)
Internet Explorer is a web browser from Microsoft. An information disclosure vulnerability exists in Microsoft Internet Explorer, which can be exploited by an unauthenticated, remote attacker to gain access to sensitive information on the target system...
SQL Injection Vulnerability in Intelligent Website Building System of Dongying Navigator Network Technology Co.
Dongying Navigator Network Technology Co., Ltd formerly Navigator Internet is a professional company that provides services such as website construction and production, website promotion and optimization, and overall solutions for network marketing. Dongying Pilot Network Technology Co., Ltd...
Berjun BOS backend management system suffers from jboss deserialization command execution vulnerability
Shanghai Bojun Software Technology Co., Ltd. is a provider of integrated solutions for the fashion industry. Bethune BOS backend management system exists jboss deserialization command execution vulnerability. The vulnerability is due to the JBOSS middleware deployment interface is not deleted,...
MGASA-2017-0403 Updated lucene packages fix security vulnerability
It was found that the CoreParser class in Lucene accepts doctype declaration and expands external entities. An attacker could use this flaw to bypass security restrictions and access sensitive data CVE-2017-12629...
SQL Injection Vulnerability in NetShow Shopping System V5.4 shangpintj.asp
Net show shopping system is a shopping site developed with asp + access. A SQL injection vulnerability exists in NetShow Shopping System V5.4 shangpintj.asp. An attacker can obtain sensitive database information by constructing specific SQL statements...
Mako Web Server 2.5 Multiple Vulnerabilities - Active Check
Mako Web Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mako:makowebserver";...
Sensitive Data Access: Where Traditional UBA Solutions Fall Short – Whiteboard Wednesday [Video]
In today’s global information economy an ever-increasing amount of sensitive data is collected, used, exchanged, analyzed, and retained. And with that comes an ever-increasing number of accidental or intentional data breaches. Identifying inappropriate access to data is paramount in stopping a...
SQL injection vulnerability in the products.asp page of Hefei Qifan Network Technology Co.
Qifan Technology enterprise website builder is a website builder system. A SQL injection vulnerability exists in the products.asp page of the enterprise website of Hefei Qifan Network Technology Co. The vulnerability is due to the system failing to effectively filter the data submitted by users. ...
Wenzhou Starlight Technology Development Co., Ltd. website builder system newLook.asp page SQL injection vulnerability
Wenzhou Starlight Technology Development Co., Ltd. website builder is a website builder system. There is a SQL injection vulnerability in the newLook.asp page of the website builder system of Wenzhou Starlight Technology Development Co. The vulnerability is due to the system fails to effectively...
SQL injection vulnerability in the nav_id parameter of the arc.php page of the Yuntrun website builder system
Yuntrue United website builder system is a website builder system SQL injection vulnerability exists in the navid parameter on the arc.php page of the Yuntrun website builder system, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in Paysan Network Backend Management System
Paixiang network backstage management system is a station-building system developed by Zhejiang Soupai Information Technology Co. There is a SQL injection vulnerability in the id parameter of PaiSang's backend management system, which can be exploited by an attacker to obtain sensitive informatio...
Security feature bypass
The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reportinguser role could execute a report with the permissions of another reporting user, possibly gaining access to...
CVE-2017-8446
The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reportinguser role could execute a report with the permissions of another reporting user, possibly gaining access to...
