53 matches found
Code execution vulnerability in Ocean CMS (CNVD-2021-25368)
Ocean CMS, also known as SEACMS, is completely open source and free of charge, adaptive to computers, cell phones, tablets, APP multi-terminal, no encryption, more secure, it is your best station-building tool! Ocean CMS code execution vulnerabilities, attackers can use the vulnerability to obtai...
SQL Injection Vulnerability in Kingsoft Terminal Security System V9.0
Terminal Security System V9.0 is a terminal security management platform specially designed for the government, military industry, energy, education, medical care and grouped enterprises. Kingsoft Terminal Security System V9.0 suffers from SQL injection vulnerability, which can be exploited by...
Falcon Terminal Security System V9.0 suffers from local elevation of privilege vulnerability
The business scope of Beijing Falcon Security Technology Co., Ltd. includes: technology promotion, technology development, technology service, technology consulting; sales of computers, software and auxiliary equipment, electronic products and so on. Falcon Terminal Security System V9.0 has a loc...
Unauthorized Access Vulnerability in Terminal Security Management System (Skyrocket) of Chianxin Technology Group Co.
Chianxin Terminal Security Management System is an integrated terminal security product solution for government and enterprise units. Unauthorized access vulnerability exists in the Terminal Security Management System Tianrong of Chianxin Technology Group Corporation, which can be exploited by...
Active Defense Bypass Vulnerability in the Core Component of SmartMass Endpoint Security
Wisdom Terminal Security, Wisdom Terminal Security is a computer system security and protection software newly developed in 2018. There is an active defense bypass vulnerability in the core component of Wise Terminal Security, which can be exploited by attackers to construct malformed PE samples...
Command Execution Vulnerability in V8+ Terminal Security System of Beijing Kingsoft Security Management System Technology Co.
Kingsoft v8+ Terminal Security System is a new generation of enterprise terminal security software, the product can dynamically detect, real-time processing, network-wide traceability of unknown threats in the user network. Beijing Kingsoft Security Management System Technology Co., Ltd. V8+...
Denial of Service Vulnerability in the Core Component of SmartMass Endpoint Security
Wise Quantity Terminal Security is a professional and reliable computer system security protection software developed in the latest 2018. There is a denial-of-service vulnerability in the core component of Wisdom Terminal Security. An attacker can exploit the vulnerability to construct malformed...
SUSE-SU-2017:1627-1 Security update for sudo
This update for sudo fixes the following issues: - CVE-2017-1000368: A follow-up fix to CVE-2017-1000367, the Linux process name could also contain a newline, which could be used to trick sudo to read/write to an arbitrary open terminal. bsc1042146 Also the following non security bug was fixed: -...
Buffer Overflow Vulnerability in Multiple Huawei Secospace Products
Huawei Secospace is a terminal security management system. A buffer overflow vulnerability exists in multiple Huawei Secospace products. Due to the lack of boundary checking of user-copied data, an attacker exploiting the vulnerability could reboot the affected device, resulting in a...
RHEL 2.1 : hanterm-xf (RHSA-2003:071)
Updated Hangul Terminal packages fix two security issues. Hangul Terminal is a terminal emulator for the X Window System, based on Xterm. Hangul Terminal provides an escape sequence for reporting the current window title, which essentially takes the current title and places it directly on the...
Moderate: Red Hat Security Advisory: hanterm-xf security update
Updated Hangul Terminal packages fix two security issues. Hangul Terminal is a terminal emulator for the X Window System, based on Xterm. Hangul Terminal provides an escape sequence for reporting the current window title, which essentially takes the current title and places it directly on the...
CVE-2003-0070
VTE, as used by default in gnome-terminal terminal emulator 2.2 and as an option in gnome-terminal 2.0, allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containin...
CVE-1999-0894
The CVE-1999-0894 issue concerns the Red Hat Linux screen program that does not use Unix98 ptys, enabling local users to write to other terminals. The connected PT-2000-1029 entry reiterates the Red Hat Linux screen issue and notes that no information about a newer version containing a fix is ava...