171 matches found
CVE-2021-32517
Improper access control vulnerability in sharelink in QSAN Storage Manager allows remote attackers to download arbitrary files using particular parameter in download function. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...
getsimplecms 跨站脚本漏洞
GetSimple CMS is an XML-based, completely self-contained, streamlined content management system. A cross-site scripting vulnerability exists in admin/changedata.php in GetSimple CMS 3.3.15 and earlier versions. The vulnerability can be exploited to conduct cross-site scripting attacks via the...
Intel Security Library 安全特征问题漏洞
Intel Security Library is the Intel Security Library for data center applications from Intel Corporation. A security signature issue vulnerability exists in Intel Security Library versions prior to 3.3, which stems from the use of a cryptographically weak pseudo-random number generator PRNG in th...
CVE-2020-26677
Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the API...
CVE-2021-20235
There's a flaw in the zeromq server in versions before 4.3.3 in src/decoderallocators.hpp. The decoder static allocator could have its sized changed, but the buffer would remain the same as it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zeromq server...
Intel Data Migration Software Elevation of Privilege Vulnerability
Intel Data Migration Software is a set of data migration software from Intel USA. The software supports data migration between two storage drives. A security vulnerability exists in the installer of Intel Data Migration Software 3.3 and earlier versions, which stems from incorrect default...
YCCMS v3.3 Arbitrary File Deletion Vulnerability
YCCMS is a PHP version of a lightweight CMS builder. YCCMS v3.3 has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary files...
GetSimple CMS Remote Code Execution Vulnerability
GetSimple CMS is a content management system CMS written in PHP. A remote code execution vulnerability exists in GetSimple CMS version 3.3.15 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary PHP code on an affected system...
CVE-2018-18364
Symantec Ghost Solution Suite GSS versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file DLL that the attacker...
Open Ticket Request System Agent Frontend Information Disclosure Vulnerability
Open Ticket Request System OTRS is an open source defect tracking and management system software from the German OTRS Group. The software categorizes service requests submitted through various channels such as phone calls, emails, etc. into different queues and service levels, and service personn...
UBUNTU-CVE-2017-11610
The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups...
Opencv Remote Code Execution Vulnerability
OpenCV is an open source, cross-platform, lightweight computer vision library. A remote code execution vulnerability exists in the modules/imgcodecs/src/grfmtpxm.cpp file in OpenCV 3.3 and earlier versions. A remote attacker could exploit this vulnerability to execute code or cause a denial of...
DEBIAN-CVE-2017-12601
OpenCV Open Source Computer Vision Library through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmtbmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case...
OpenCV Denial of Service Vulnerability (CNVD-2017-24179)
OpenCV is an open source, cross-platform, lightweight computer vision library. A denial of service vulnerability exists in the 'icvCvtBGRA2BGR8uC4C3R' function in OpenCV 3.3 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service read across boundaries...
Kopano WebApp Cross-Site Scripting Vulnerability
Kopano WebApp is a Web-based e-mail management program from the German Kopano team. file previewer plugin is one of the document previewer plugin. A cross-site scripting vulnerability exists in the js/ViewerPanel.js file of the file previewer plugin in Kopano WebApp 3.3.0 and earlier versions. A...
CVE-2017-1373
Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute a report they do not have access to. IBM X-Force ID: 126866...
DEBIAN-CVE-2017-9324
In Open Ticket Request System OTRS 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5.0.19, an attacker with agent permission is capable of opening a specific URL in a browser to gain administrative privileges / full access. Afterward, all system settings can be read and changed. The URL...
PT-2017-2348 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.3 Description: The issue is related to the mm subsystem in the Linux kernel, which does not properly enforce the CONFIG STRICT DEVMEM protection mechanism. This allows local users to read or write to kernel...
CVE-2016-9737
IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference : 1996200...
Cagintranet Networks GetSimple CMS Information Disclosure Vulnerability
Cagintranet Networks GetSimple CMS is an XML-based content management system CMS from Cagintranet Networks, USA. The system includes a theme selector and editor, component editor, image and file managers, and more. A security vulnerability exists in Cagintranet Networks GetSimple CMS version 3.3....