SQL Injection Vulnerability in the Backend Us***_Ro***.aspx File of Qixing Image & Video Library Gallery v27.0

Qixing Image & Video GalleryGallery is mainly used to store images or videos in the company. A SQL injection vulnerability exists in the backend UsRo.aspx file of Qixing Image & Video Gallery v27.0, which can be exploited by an attacker to obtain sensitive information from the database...

Unspecified vulnerability in GNU C Library

The GNU C Library a.k.a. glibc, libc6 is an open-source, free C language compiler released under the LGPL license. A security vulnerability exists in GNU C Library version 2.28 and earlier, which stems from the fact that upon successful parsing of a string containing an IPv4 address, the program...

Intel PROSet/Wireless WiFi Software Elevation of Privilege Vulnerability

Intel Dual Band Wireless-AC 3160 and others are wireless network cards from Intel Corporation USA.Intel PROSet/Wireless WiFi Software is the set of software that runs on it. The software includes Wi-Fi drivers, wireless software extensions, and Wi-Fi connectivity utilities. A security vulnerabili...

PT-2018-16281 · Computerinsel · Photoline

Name of the Vulnerable Software and Affected Versions: Computerinsel Photoline version 20.53 Description: A memory corruption issue exists in the PCX-parsing functionality. Processing a specially crafted PCX image can lead to an out-of-bounds write, overwriting arbitrary data, and potentially...

Allen Bradley Micrologix 1400 Series B FRN Access Control Vulnerability

Allen Bradley Micrologix 1400 Series B FRN is a programmable logic controller from Rockwell Automation. An access control vulnerability exists in the data, program, and function file permissions functions in the Allen Bradley Micrologix 1400 Series B FRN version 21.2 and earlier. An attacker coul...

Allen Bradley Micrologix 1400 Series B FRN Access Control Vulnerability (CNVD-2018-08279)

Allen Bradley Micrologix 1400 Series B FRN is a programmable logic controller from Rockwell Automation. An access control vulnerability exists in the data, program, and function file permissions function in Allen Bradley Micrologix 1400 Series B FRN 21.2 and earlier. When a memory module is not...

DualDesk Proxy.exe Server Denial of Service Vulnerability

DualDesk is a suite of remote control software. A security vulnerability exists in the Proxy.exe file in DualDesk version 20. The vulnerability can be exploited by a remote attacker to cause a denial of service daemon crash by sending a long string of characters to TCP port 5500...

PHICOMM K2 (PSG1218) Input Validation Vulnerability

The PHICOMM K2 PSG1218 is a wireless router product from the Chinese company PHICOMM. An input validation vulnerability exists in PHICOMM K2 PSG1218 versions 22.5.11.5 and earlier. A remote attacker can exploit this vulnerability by sending a request to an ASP script to execute code...

Extreme EXOS elevation of privilege vulnerability (CNVD-2017-32702)

Extreme EXOS is a new generation modular switch operating system from Extreme Networks. An elevation of privilege vulnerability exists in Extreme EXOS versions 16.x, 21.x, and 22.x. The vulnerability can be exploited to obtain a root shell. An attacker can exploit this vulnerability to obtain a...

Extreme EXOS Elevation of Privilege Vulnerability

Extreme EXOS is a new generation modular switch operating system from Extreme Networks. An elevation of privilege vulnerability exists in Extreme EXOS versions 16.x, 21.x, and 22.x. The vulnerability can be exploited to obtain a root shell. An attacker can exploit this vulnerability to obtain a...

Extreme EXOS Arbitrary File Read Vulnerability

Extreme EXOS is a new generation modular switch operating system from Extreme Networks. An arbitrary file read vulnerability exists in Extreme EXOS versions 16.x, 21.x, and 22.x. An attacker can exploit this vulnerability to read arbitrary files. An attacker can exploit this vulnerability to read...

USN-3427-1 emacs24 vulnerability

Charles A. Roelli discovered that Emacs incorrectly handled certain files. If a user were tricked into opening a specially crafted file e.g., email messages in gnus, an attacker could possibly use this to execute arbitrary code...

OrientDB Arbitrary Command Execution Vulnerability

OrientDB is a British company Orient a set of open source NoSQL database management system . The system supports ACID transactions , fast indexes and SQL queries and other features . OrientDB 2.22 and previous versions of a security vulnerability , the vulnerability stems from the program fails t...

Pivotal Software Cloud Foundry Foundation BOSH Azure CPI Code Injection Vulnerability

Pivotal Software Cloud Foundry Foundation BOSH Azure CPI is a set of open source tools for deployment and lifecycle management of distributed systems from Pivotal Software, USA. A code injection vulnerability exists in version v22 of Pivotal Software Cloud Foundry Foundation BOSH Azure CPI. An...

Adobe Flash Player Type Obfuscation Remote Code Execution Vulnerability (CNVD-2016-10908)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A type-obfuscated remote code execution vulnerability exists in Adobe Flash Player versions 23.0.0.205 and earlier...

CVE-2016-7865

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution...

CVE-2016-7861

Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability. Successful exploitation could lead to arbitrary code execution...

Pivotal Cloud Foundry MariaDB audit_plugin component information disclosure vulnerability

Pivotal Cloud Foundry PCF is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software, Inc. in the United States. cf-mysql-release is one of the releases. mariaDB auditplugin is one of the plugins that allows operators to enable audit trails and logging sent to SQL...

CVE-2016-4140

Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-083...

mini-httpd Information Disclosure Vulnerability

mini-httpd is a small HTTP server developed by ACME Labs that supports basic authentication, common MIME types and directory listings. A security vulnerability exists in minihttpd version 1.21 and earlier. A remote attacker can exploit this vulnerability by sending HTTP requests with extra-long...