GHSA-PMV6-GF98-P3R5 Command Injection in kill-port

Versions of kill-port prior to 1.3.2 are vulnerable to Command Injection. The package does not validate user input on the kill function. This may allow attackers to run arbitrary commands in the system if user input such as the port number is passed directly to the function. Recommendation Upgrad...

Unauthorized Access Vulnerability in DSCms Enterprise Site Content Management System v1.3

DSCms enterprise station content management system is a enterprise website system launched by Changsha Desha Network Technology Co. DSCms Enterprise Station Content Management System v1.3 has an unauthorized access vulnerability, which can be exploited by attackers to modify other users'...

BlackCat CMS Cross-Site Scripting Vulnerability (CNVD-2018-14549)

BlackCatCMS is an open source content management system CMS that supports both English and German. A cross-site scripting vulnerability exists in the backend/pages/modify.php file in BlackCatCMS version 1.3. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML v...

PT-2017-17801

Name of the Vulnerable Software and Affected Versions ARM Trusted Firmware version 1.3 Description The issue in ARM Trusted Firmware allows attackers to bypass the MT EXECUTE NEVER protection mechanism because RO memory is always executable at AArch64 Secure EL1. This is due to an inconsistency i...

Parameters in loginlog_2.php in Shield Spirit Public Number Promotion System v1.3 have sql injection vulnerabilities

Shield Spirit public number promotion system is mainly applied to public number promotion alliance, suitable for personal and business subscription number and service number or enterprise number. Shield Spirit public promotion system v1.3 in loginlog2.php parameters exist sql injection...

OpenJPEG Remote Heap Buffer Overflow Vulnerability

OpenJPEG is a C-based open source JPEG 2000 codec . A remote heap buffer overflow vulnerability exists in OpenJPEG versions 1.3 and 1.5.1. An attacker could exploit this vulnerability to execute arbitrary code in the context of a user-run application, which could also result in a denial of servic...

Moxa SoftCMS Buffer Overflow Vulnerability

Moxa SoftCMS is the centralized management software for managing large surveillance systems. Buffer overflow vulnerabilities exist in Moxa SoftCMS version 1.3 and earlier. A remote attacker can exploit these vulnerabilities to execute arbitrary code...

Cisco Identity Services Engine Security Bypass Vulnerability

Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A security bypass...

PT-2006-5246 · Cutenews · Cutenews

Name of the Vulnerable Software and Affected Versions: CuteNews versions 1.3.x Description: The issue allows remote attackers to potentially execute arbitrary PHP code via a URL in the cutepath parameter to API endpoints such as "show news.php" or "search.php". However, analysis has not identifie...