Lucene search
K

1369 matches found

CNVD
CNVD
added 2022/03/01 12:0 a.m.14 views

Command Execution Vulnerability in TOTOLINK A850R

The A850R is a Gigabit dual band wireless router. A command execution vulnerability exists in the TOTOLINK A850R, which can be exploited by an attacker to gain control of the server...

7.5AI score
Exploits0
CNVD
CNVD
added 2022/02/22 12:0 a.m.72 views

Command Execution Vulnerability in Mingguo Security Gateway of Hangzhou ACE Information Technology Co. Ltd (CNVD-2022-25740)

MingGuard Security Gateway builds a next-generation security protection system with full-process defense and integrates traditional firewall, intrusion detection, intrusion prevention system, anti-virus gateway, Internet behavior control, VPN gateway, threat intelligence, and other security modul...

7.6AI score
Exploits0
CNVD
CNVD
added 2022/02/21 12:0 a.m.16 views

Damon database management system has a logic flaw vulnerability

Damon Database Management System is a high-performance database management system with fully independent intellectual property rights launched by Damon, or DM for short. Damon Database Management System has a logic flaw vulnerability, which can be exploited by attackers to gain control of the...

2.8AI score
Exploits0
CNVD
CNVD
added 2022/02/21 12:0 a.m.21 views

Command Execution Vulnerability in SuperMap iServer 10i of Beijing SuperMap Software Co.

SuperMap iServer is a cloud GIS application server based on high-performance cross-platform GIS kernel. A command execution vulnerability exists in SuperMap iServer 10i of Beijing SuperMap Software Co. Ltd. that can be exploited by an attacker to gain control of the server...

7.5AI score
Exploits0
CNVD
CNVD
added 2022/02/14 12:0 a.m.64 views

Command Execution Vulnerability in Sunflower Personal Edition for Windows at Shanghai Berry Information Technology Co.

Sunflower is a free, all-in-one remote control management tool software that integrates remote control of computer and cell phone, remote desktop connection, remote boot, remote management, and intranet penetration support. Ltd. Sunflower Personal Edition for Windows has a command execution...

7.8AI score
Exploits0
CNVD
CNVD
added 2022/02/13 12:0 a.m.13 views

File Upload Vulnerability in Agricultural Water Pricing Reform System of Siltronic Ltd.

Siltronic is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Agricultural Water Pricing Reform System of Siltronic Technology Limited, which can be exploited by attackers to gain control of the server...

7.4AI score
Exploits0
Veracode
Veracode
added 2022/02/11 7:7 a.m.32 views

Remote Code Execution (RCE)

topthink/thinkphp is vulnerable to remote code execution. An attacker can obtain server control privileges by injecting a malicious code through the filename function in class.php...

8.8CVSS5AI score0.01893EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/02/11 12:0 a.m.22 views

GHSA-75JP-87W2-C6X2 ThinkPHP Remote Code Execution (RCE) vulnerability

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

8.8CVSS8.8AI score0.01893EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2022/02/11 12:0 a.m.26 views

ThinkPHP Remote Code Execution (RCE) vulnerability

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

8.8CVSS7.5AI score0.01893EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2022/02/10 5:15 p.m.13 views

CVE-2021-44892

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

8.8CVSS0.01893EPSS
Exploits1References1
OSV
OSV
added 2022/02/10 5:15 p.m.25 views

CVE-2021-44892

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

8.8CVSS7.5AI score
Exploits0References1
Prion
Prion
added 2022/02/10 5:15 p.m.27 views

Remote code execution

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

6.5CVSS8.8AI score0.01893EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/02/10 4:5 p.m.23 views

CVE-2021-44892

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

9.2AI score0.01893EPSS
Exploits1References1
CVE
CVE
added 2022/02/10 4:5 p.m.129 views

CVE-2021-44892

ThinkPHP 3.x.x is affected by CVE-2021-44892 due to a vulnerability in value[_filename] processed by index.php, enabling a remote attacker to gain server control privileges. Affected component: ThinkPHP 3.x.x (via index.php). Root cause: improper handling of the filename parameter leading to RCE....

8.8CVSS8.8AI score0.01893EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/02/10 12:0 a.m.10 views

ThinkPHP 安全漏洞

ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Thinking Information Technology Company. A security vulnerability exists in ThinkPHP, which stems from a Remote Code Execution RCE vulnerability in ThinkPHP 3.x. An attacker can exploit this...

8.8CVSS8AI score0.01893EPSS
Exploits1References2
CNVD
CNVD
added 2022/01/31 12:0 a.m.13 views

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd (CNVD-2022-16624)

Siltronic Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Sicron Technology Co. Ltd, which can be exploited by attackers to gain control of the...

7.4AI score
Exploits0
CNVD
CNVD
added 2022/01/31 12:0 a.m.10 views

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Technology Limited (CNVD-2022-16623)

Siltronic Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Sicron Technology Co. Ltd, which can be exploited by attackers to gain control of the...

7.4AI score
Exploits0
CNVD
CNVD
added 2022/01/31 12:0 a.m.8 views

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd (CNVD-2022-16620)

Siltronic Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Siltronic Ltd. that can be exploited by attackers to gain control of the server...

7.4AI score
Exploits0
CNVD
CNVD
added 2022/01/31 12:0 a.m.11 views

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd.

Siltronic is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Sicron Technology Co. Ltd, which can be exploited by attackers to gain control of the serv...

7.4AI score
Exploits0
CNVD
CNVD
added 2022/01/31 12:0 a.m.8 views

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd (CNVD-2022-16622)

Siltronic is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Sicron Technology Co. Ltd, which can be exploited by attackers to gain control of the serv...

7.4AI score
Exploits0
Rows per page
Query Builder