7755 matches found
TrippLite SU2200RTXL2Ua 跨站脚本漏洞
TrippLite The TrippLite SU2200RTXL2Ua is a double conversion UPS system from TrippLite USA. Used for critical servers, network and telecom equipment. The TrippLite SU2200RTXL2Ua suffers from a cross-site scripting vulnerability that stems from a stored cross-site scripting XSS vulnerability found...
CVE-2020-22176
PHPGurukul Hospital Management System in PHP v4.0 has a sensitive information disclosure vulnerability in multiple areas. Remote unauthenticated users can exploit the vulnerability to obtain user sensitive information...
Responsive Tourism Website 3.1 - Remote Code Execution (RCE) (Unauthenticated)
Exploit Title: Responsive Tourism Website 3.1 - Remote Code Execution RCE Unauthenticated Date: 22.06.2021 Exploit Author: Tagoletta Tağmaç Software Link: https://www.sourcecodester.com/php/14838/simple-responsive-tourism-website-using-php-free-source-code.html Version: V 3.1 Tested on: MacOS &...
Autodesk AutoCAD 缓冲区错误漏洞
Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A buffer error vulnerability exists in Autodesk AutoCAD that stems from a lack of proper validation of user-supplied data and can be exploited by an attacker to execute code...
Wordpress 插件跨站脚本漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress Plugin is an open source application plugin for WordPress. Wordpress plugin Fudousan 5.7.0 suffers from a cross-site...
CVE-2021-0521
In getAllPackages of PackageManagerService, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of cross-user permissions with no additional execution privileges needed. User interaction is not needed for...
CVE-2021-3604
Secure 8 Evalos does not validate user input data correctly, allowing a remote attacker to perform a Blind SQL Injection. An attacker could exploit this vulnerability in order to extract information of users and administrator accounts stored in the database...
primion Technology AG Secure 8 SQL注入漏洞
primion Technology AG Secure 8 is an access control solution from the Spanish company primion Technology AG. It is designed to control the access of people and vehicles to various locations. Secure 8 suffers from an SQL injection vulnerability that stems from Secure 8 Evalos not properly validati...
CVE-2021-32936
An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a...
CVE-2021-32940
An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK All versions prior to 2022.5 resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allow attackers to cause a denial-of-servi...
CVE-2021-32946
An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK Version 2022.4 and prior resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a...
OpenText Brava! Desktop out-of-bounds write vulnerability (CNVD-2021-42384)
OpenText Brava! Desktop is a browser-based universal document viewer from OpenText Opentext Canada. The product supports viewing, annotating and editing many types of documents. A security vulnerability exists in OpenText Brava! Desktop that stems from the program's lack of proper validation of...
OpenText Brava! Desktop out-of-bounds read vulnerability (CNVD-2021-42382)
OpenText Brava! Desktop is a browser-based universal document viewer from OpenText Opentext Canada. The product supports viewing, annotating and editing many types of documents. OpenText Brava! Desktop suffers from an out-of-bounds read vulnerability vulnerability that stems from the program's la...
OpenText Brava! Desktop out-of-bounds write vulnerability (CNVD-2021-42383)
OpenText Brava! Desktop is a browser-based universal document viewer from OpenText Opentext Canada. The product supports viewing, annotating and editing many types of documents. A security vulnerability exists in OpenText Brava! Desktop that stems from the program's lack of proper validation of...
VeryFitPro 加密问题漏洞
VeryFitPro is a powerful health management software from China's Shenzhen Aidu Technology Co., Ltd. that needs to be used with the same brand of smart bracelet, using the app users can view the number of steps taken, calories burned, sleep quality and other information in real time. There is an...
Microsoft Gets Second Shot at Banning hiQ from Scraping LinkedIn User Data
The U.S. Supreme Court has granted LinkedIn another legal option to try to prevent rival hiQ Labs from scraping public information from its user profiles, something the Microsoft-owned professional networking platform has claimed is a violation of user privacy and a misuse of its data. The court...
Client Management System 1.1 SQL Injection
Exploit Title: Client Management System 1.1 - 'Search' SQL Injection Date: 14 June 2021 Exploit Author: BHAVESH KAUL Vendor Homepage: https://phpgurukul.com Software Link: https://phpgurukul.com/client-management-system-using-php-mysql/ Version: 1.1 Tested on: Server: XAMPP Description Client...
XSS vulnerability in graphite documents
Graphite Docs is an enterprise office service software that supports real-time collaboration in the cloud features analogous to Google Docs, Quip. A XSS vulnerability exists in Graphite Documents. Attackers can use this vulnerability to obtain sensitive information such as user cookies...
MGASA-2021-0258 Updated kernel-linus packages fix security vulnerabilities
This kernel-linus update is based on upstream 5.10.43 and fixes at least the following security issues: The 802.11 standard that underpins Wi-Fi Protected Access WPA, WPA2, and WPA3 and Wired Equivalent Privacy WEP doesn't require that received fragments be cleared from memory after reconnecting ...