8472 matches found
CVE-2021-44348
SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameer in App\Manage\Controller\AdvertController.class.php...
CVE-2020-36129
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aomimage.c...
CVE-2020-36130
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1dxiface.c...
CVE-2020-36134
AOM v2.0.1 was discovered to contain a segmentation violation via the component aomdsp/x86/obmcsadavx2.c...
CVE-2020-36131
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/ratehist.c...
CVE-2020-36130
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1dxiface.c...
pdfbox: infinite loop while loading a crafted PDF file
In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions...
ECShop SQL注入漏洞
ECShop is an open source mall system from Business School. Support PC H5 APP small program mall, source code free download experience, suitable for enterprise development build mall. ecshop in v2.7.3 version there is a SQL injection vulnerability, the vulnerability stems from ecshop database base...
PT-2021-11923 · Aom +1 · Aom +1
Name of the Vulnerable Software and Affected Versions: AOM version 2.0.1 Description: A stack buffer overflow was discovered in AOM via the component src/aom image.c. Recommendations: For AOM version 2.0.1, at the moment, there is no information about a newer version that contains a fix for this...
CVE-2021-43137
Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exits in hostel management system 2.1 via the name field in my-profile.php. Chaining to this both vulnerabilities leads to account takeover...
PT-2021-23750 · Unknown · Hospital Management System
Name of the Vulnerable Software and Affected Versions: hostel management system version 2.1 Description: The issue concerns Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerabilities. These vulnerabilities exist via the name field in the "my-profile.php" page. By chaining these...
CVE-2021-44428
Pinkie 2.15 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1...
CVE-2021-43695
issabelPBX version 2.11 is affected by a Cross Site Scripting XSS vulnerability. In file page.backuprestore.php, the exit function will terminate the script and print the message to the user. The message will contain $REQUEST without sanitization, then there is a XSS vulnerability...
GLPI 路径遍历漏洞
GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...
undertow: potential security issue in flow control over HTTP/2 may lead to DOS
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability...
CVE-2021-39353
The Easy Registration Forms WordPress plugin is vulnerable to Cross-Site Request Forgery due to missing nonce validation via the ajaxaddform function found in the /includes/class-form.php file which made it possible for attackers to inject arbitrary web scripts in versions up to, and including...
CVE-2021-0186
Improper input validation in the IntelR SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access...
mina-sshd-core: Memory leak denial of service in Apache Mina SSHD Server
A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0...
haproxy: does not ensure that the scheme and path portions of a URI have the expected characters
A flaw was found in haproxy. An input validation flaw when processing HTTP/2 requests causes haproxy to not ensure that the scheme and path portions of a URI have the expected characters. This may cause specially crafted input to bypass implemented security restrictions. The highest threat from...