5209 matches found
CVE-2021-44132
A command injection vulnerability in the function formImportOMCIShell of C-DATA ONU4FERW V2.1.13X139 allows attackers to execute arbitrary commands via a crafted file...
CVE-2022-25148
The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the currentpageid parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain...
CVE-2022-21799
Cross-site scripting vulnerability in ELECOM LAN router WRC-300FEBK-R firmware v1.13 and earlier allows an attacker on the adjacent network to inject an arbitrary script via unspecified vectors...
PT-2022-6694 · Schneider Electric · Ecostruxure Ev Charging Expert
Name of the Vulnerable Software and Affected Versions: EcoStruxure EV Charging Expert versions prior to V4.0.0.13 Description: A vulnerability exists that could cause unintended modifications of the product settings or user accounts when deceiving the user to use the web interface rendered within...
elecom lan 跨站脚本漏洞
elecom lan is a router from Elecom Japan. A cross-site scripting vulnerability exists in the ELECOM LAN router, which stems from a cross-site scripting vulnerability in the ELECOM LAN router wrc - 300fek - r firmware v1.13 and earlier. An attacker can exploit this vulnerability to inject arbitrar...
CVE-2021-42633
PrinterLogic Web Stack versions 19.1.1.13 SP9 and below are vulnerable to SQL Injection, which may allow an attacker to access additional audit records...
CVE-2021-46663
MariaDB through 10.5.13 allows a hamaria::extra application crash via certain SELECT statements...
CVE-2021-4133
creationtimestamp| type| source ---|---|--- 2022-01-25 22:18:54+00:00| seen| https://t.me/cibsecurity/36258 2024-01-28 04:57:50+00:00| seen| https://t.me/arpsyndicate/3210...
CVE-2022-21392
Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Policy Framework. Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...
CVE-2021-43566
All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for...
UBUNTU-CVE-2021-43566
All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for...
GHSA-4JF5-JGGP-G56J Cross-Site Request Forgery in com.softwaremill.akka-http-session:core_2.12
This affects the package com.softwaremill.akka-http-session:core2.12 from 0 and before 0.6.1; all versions of package com.softwaremill.akka-http-session:core2.11; the package com.softwaremill.akka-http-session:core2.13 from 0 and before 0.6.1. CSRF protection can be bypassed by forging a request...
Linux kernel加密问题漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a security vulnerability that stems from an information leak in the net IPv6 output core.c in the IPv6 implementation of the Linux kernel prior to...
Apple macOS High Sierra 安全漏洞
Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers. Apple macOS High Sierra versions prior to 10.13 have a security vulnerability that could be exploited to access restricted files...
CVE-2021-44005
A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The TiffLoader.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted TIFF files. This could allow an attacker to execute code ...
CVE-2021-39052
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization. IBM X-Force ID: 214523...
OPENSUSE-SU-2021:3835-1 Security update for mariadb
This update for mariadb fixes the following issues: - Update to 10.5.13: - CVE-2021-35604: Fixed InnoDB vulnerability that allowed an high privileged attacker with network access via multiple protocols to compromise MySQL bsc1192497...
CVE-2021-36325
creationtimestamp| type| source ---|---|--- 2021-11-13 02:39:24+00:00| seen| https://t.me/cibsecurity/32361...
USN-5145-1 postgresql-10, postgresql-12, postgresql-13 vulnerabilities
Jacob Champion discovered that PostgreSQL incorrectly handled SSL certificate verification and encryption. A remote attacker could possibly use this issue to inject arbitrary SQL queries when a connection is first established...