CVE-2020-25652

A flaw was found in the spice-vdagentd daemon, where it did not properly handle client connections that can be established via the UNIX domain socket in /run/spice-vdagentd/spice-vdagent-sock. Any unprivileged local guest user could use this flaw to prevent legitimate agents from connecting to th...

WeLive online customer service system suffers from arbitrary file download vulnerability

WeLive Online Customer Service System is an online online customer service system. WeLive Online Customer Service System has an arbitrary file download vulnerability. An attacker can use this vulnerability to download arbitrary files from the server and obtain sensitive information...

SQL Injection Vulnerability in 120 Emergency Command Center Web Service System (CNVD-2020-31564)

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the 120 Emergency Command Center Web Service System, which can be exploite...

SQL Injection Vulnerability in 120 Emergency Command Center Web Service System (CNVD-2020-31570)

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the 120 Emergency Command Center Web Service System, which can be exploite...

SQL Injection Vulnerability in 120 Emergency Command Center Web Service System (CNVD-2020-31608)

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the 120 Emergency Command Center Web Service System, which can be exploite...

SQL Injection Vulnerability in the Frontend Registration Module of 120 Emergency Command Center Web Service System

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the frontend registration module of the 120 Emergency Command Center Web...

SQL Injection Vulnerability in 120 Emergency Command Center Web Service System in***.php Page

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the in.php page of the 120 Emergency Command Center Web Service System,...

SQL Injection Vulnerability in the New Member Module mo**** Parameters of 120 Emergency Command Center Web Service System

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the mo parameter of the new membership module of the 120 Emergency Command...

SQL Injection Vulnerability in the New Learning Module ti*** Parameters of 120 Emergency Command Center Web Service System

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. The 120 Emergency Command Center Web Service System has a new learning module ti parameter has a SQL injection...

File Upload Vulnerability in 120 Emergency Command Center Web Service System

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A file upload vulnerability exists in the 120 Emergency Command Center Web Service System, which can be exploited ...

SQL Injection Vulnerability in the New Assessment Module of 120 Emergency Command Center Web Service System

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A SQL injection vulnerability exists in the new assessment module of the 120 Emergency Command Center Web Service...

SQL Injection Vulnerability in Octave Volunteer Service Management System

Shangrao Octave Impression Technology Co., Ltd. is mainly engaged in Internet application system development and Internet operation consulting services. An SQL injection vulnerability exists in the Octave Volunteer Service Management System. An attacker can utilize the vulnerability to obtain...

SQL Injection Vulnerability in Electronic Service System V2.0 of Gansu Chengxing Information Technology Co.

Gansu Chengxing Information Technology Co., Ltd. developed to meet the needs of various types of public resource transactions, can provide timely, reliable and effective support for the Chengxing public resource trading platform. Gansu Chengxing Information Technology Co., Ltd. electronic service...

File Upload Vulnerability in Waychar 120 Emergency Command Center Web Services System

120 Emergency Command Center Web Service System is a set of web application services for 120 Emergency Command Center, including internal training, learning and assessment functions. A file upload vulnerability exists in the waychar 120 Emergency Command Center Web Service System. The vulnerabili...

Unauthorized Access Vulnerability in Super Star Huiya Digital Book Documentation Service System

Beijing Century Super Star Information Technology Development Limited Liability Company Super Star is one of the companies engaged in the digitization of paper materials and the production of electronic publications. An unauthorized access vulnerability exists in the Super Star Huiya Digital Book...

Command Execution Vulnerability in the Backend of Super Star Huiya Digital Book Literature Service System

Beijing Century Super Star Information Technology Development Limited Liability Company Super Star is one of the companies engaged in the digitization of paper materials and the production of electronic publications. A command execution vulnerability exists in the backend of the Super Star Huiya...

USN-3752-2: Linux kernel (HWE) vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Description USN-3752-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 18.04 LTS for Ubuntu 16.0...

CVE-2018-14678

An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xenfailsafecallback entry point in arch/x86/entry/entry64.S does not properly maintain RBX, which allows local users to cause a denial of service uninitialized memory usage and system crash. Within Xen...

SQL Injection Vulnerability in Shandong Wave Administrative Approval Service System

The Administrative Service System is a comprehensive administrative service system that integrates information and consultation, approval and fee collection, management and coordination, and complaint and supervision. SQL injection vulnerability exists in Shandong Wave Administrative Approval...

Ubuntu: Security Advisory (USN-2999-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...