Chengdu Zero Takeoff Network 07FLY-CRM V1 has SQL Injection Vulnerability

07FLY-CRM is zero take-off network development , based on the GPLv3 agreement issued for small and medium-sized management activities , to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed assets, public...

inoERP Input Validation Error Vulnerability

inoERP is an open source PHP-based enterprise management system. An input validation error vulnerability exists in InoERP that arises from a network system or product that does not properly validate input data...

File Upload Vulnerability in Fast Reach CMS (CNVD-2021-15975)

Fast Row CMS is open source and free PHP enterprise website production, construction, development and optimization of SEO management system. FPS CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

Moodle Information Disclosure Vulnerability (CNVD-2021-09497)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. An information disclosure vulnerability exists in Moodle 3.10, 3.9 to 3.9.3, 3.8 to 3.8.6, which originates from the disclosure of grad...

ImageMagick has an unspecified vulnerability (CNVD-2021-11325)

ImageMagick is a suite of open source image processing software. The software can read, convert or write images in a variety of formats. A security vulnerability exists in ImageMagick versions prior to 7.0.9-0, which stems from an out-of-range representable value range for the unsigned int type o...

PhpList Authentication Bypass Vulnerability (CNVD-2021-48845)

PhpList is a suite of open source newsletter and email marketing software from PhpList UK. A security vulnerability exists in phpList 3.5.3 that stems from the use of == instead of === for password hashing. No details of the vulnerability are provided at this time...

MISP cross-site scripting vulnerability (CNVD-2021-06527)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in MISP version 2.4.136, which originates from...

FeiFeiCms Has Arbitrary File Deletion Vulnerability

FeiFeiCms is a free and open source PHP movie program , focusing on providing , video on demand , film and television aggregation services. FeiFeiCms arbitrary file deletion vulnerability , attackers can exploit the vulnerability to delete arbitrary files...

A Site Published Every Face From Parler's Capitol Riot Videos

Faces of the Riot used open source software to detect, extract, and deduplicate every face from the 827 videos taken from the insurrection on January 6...

ISPConfig SQL Injection Vulnerability (CNVD-2021-02036)

ISPConfig is an open source web hosting management program for Linux with a Web control panel , you can use the Web control panel to manage web hosting , open a website , open a mailbox , open and manage mysql databases , support for DNS resolution and monitor the server's operating conditions an...

ImageMagick Digital Error Vulnerability (CNVD-2021-23804)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in MagickCore versions prior to 7.0.8-68, which stems...

ImageMagick memory leak vulnerability (CNVD-2021-23802)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A memory leak vulnerability exists in versions of ImageMagick prior to 7.0.9-0. The...

ImageMagick Code Issue Vulnerability

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68, which stem...

ImageMagick Out-of-Bounds Read Vulnerability (CNVD-2021-25964)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68 that stems...

MISP cross-site scripting vulnerability (CNVD-2021-08162)

MISP is an open source software solution for collecting, storing, distributing and sharing cybersecurity metrics and threats related to cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in...

ImageMagick Input Validation Error Vulnerability

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 6.9.10-69, which ste...

Arbitrary File Deletion Vulnerability in MLECMS

MLECMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , support for multi-language , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . MLECMS arbitrary file deletion vulnerability , an attacker can use this...

GLPI Insecure Direct Object Reference Vulnerability (CNVD-2020-67631)

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

Logic Flaw Vulnerability in BlueCMS

BlueCMS is a free professional local portal system developed by open source combination PHP + MYSQL, focusing on local portal CMS. BlueCMS suffers from a logic flaw vulnerability. Attacks can then exploit the vulnerability to obtain sensitive information...

The vulnerability of Intel Wireless for Open Source microprogramming software, related to the execution of operations beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of Intel Wireless for Open Source microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...