CVE-2019-9040

S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332...

CVE-2018-20025

Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0...

SQL Injection Vulnerability in YCCMS v3.3

YCCMS is a PHP version of a lightweight CMS builder. YCCMS v3.3 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

The vulnerability of the RPC component of the Oracle Solaris operating system, which allows a hacker to trigger a service failure

The vulnerability of the RPC component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service failures using the Portmap v3 service...

CVE-2019-1000023

OPT/NET BV OPTOSS Next Gen Network Management System NG-NetMS version v3.6-2 and earlier versions contains a SQL Injection vulnerability in Identified vulnerable parameters: id, idaccesstype and idattraccess that can result in a malicious attacker can include own SQL commands which database will...

S-CMS Chinese/English Bilingual Decoration Industry Website v3.0 po***.asp page suffers from SQL injection vulnerability

S-CMS Chinese and English bilingual decoration industry website is developed with asp+access, comes with a set of PC templates and a set of WAP templates of Chinese and English bilingual enterprise website system. S-CMS bilingual decoration industry website v3.0po.asp page SQL injection...

TP-Link WDR Series Command Injection Vulnerability

TP-Link WDR Series is a WDR series wireless router from China P&L TP-LINK. A command injection vulnerability exists in TP-Link WDR Series using v3 firmware e.g., TL-WDR5620 version V3.0, which stems from the inclusion of the sehll metacharacter in the 'citycode' field. A remote attacker could...

Microsoft Team Foundation Server Cross-Site Scripting Vulnerability (CNVD-2019-24387)

Microsoft Team Foundation Server is a source code management, project management and team collaboration platform within the Application Lifecycle Management ALM suite of tools from Microsoft. The platform helps teams collaborate more flexibly and effectively and deliver high-quality software more...

Bootstrap Cross-Site Scripting Vulnerability (CNVD-2019-23270)

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in affix in Bootstrap versions prior to 3.4.0, which can be exploited by remote attackers to inject arbitrary web script or HTML...

CVE-2019-0249

Under certain conditions SAP Landscape Management VCM 3.0 allows an attacker to access information which would otherwise be restricted...

CVE-2018-20602

Lei Feng TV CMS aka LFCMS 3.8.6 allows full path disclosure via the /install.php?s=/1 URI...

Battelle V2I Hub SQL Injection Vulnerability (CNVD-2019-03267)

The Battelle V2I Hub is a connected vehicle and roadway information management system from Battelle Memorial Institute, Inc. The system supports effective communication between infrastructure information and vehicle information. A SQL injection vulnerability exists in Battelle V2I Hub version 3.0...

The vulnerability of the OSPFv3 protocol implementation in Cisco IOS and Cisco IOS XE operating systems allows a attacker to cause a service failure.

The vulnerability of the OSPFv3 protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to errors in the packet processing mechanisms. Exploiting this vulnerability can allow a malicious actor to cause service failures by using specially crafted OSPFv3 Link-State...

S-CMS SQL Injection Vulnerability (CNVD-2018-26676)

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the bank/callback1.php file in S-CMS version 3.0, which stems from the program's failure to filter the 'Pno' field, and can be exploited by remote attackers to execute SQL statements with the...

PT-2018-15402 · S Cms · S-Cms

Name of the Vulnerable Software and Affected Versions: S-CMS version 3.0 Description: An issue in S-CMS allows SQL Injection via the P no field in the "bank/callback1.php" API endpoint. Recommendations: For S-CMS version 3.0, update to a version that includes a fix for this issue, or as a tempora...

radare2 'r_bin_dyldcache_extract' function heap buffer overflow vulnerability

radare2 is a set of libraries and tools for working with binary files. A heap buffer overflow vulnerability exists in the 'rbindyldcacheextract' function in the libr/bin/format/mach0/dyldcache.c file in radare2 versions prior to 3.1.1. An attacker can exploit this vulnerability to cause a denial ...

The vulnerability of the implementation of SMBv2 and SMBv3 protocols in Cisco Firepower System software allows a perpetrator to induce a service failure.

The vulnerability of the SMBv2 and SMBv3 protocols implemented by Cisco Firepower System arises from incorrect validation of the SMB message header. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2018-17949

Cross site scripting vulnerability in iManager prior to 3.1 SP2...

LibSass Denial of Service Vulnerability (CNVD-2018-24636)

LibSass is an open source written in C using Sass CSS extension language parser . A denial of service vulnerability exists in the inspect.cpp file in LibSass version 3.5.5, which can be exploited by an attacker to cause a denial of service with the help of a specially crafted sass input file...

Tarantella Enterprise Path Traversal Vulnerability

Tarantella Enterprise is a centralized data and application management tool that provides a Web management interface and runs on most Unix and Linux platforms. A path traversal vulnerability exists in Tarantella Enterprise versions prior to 3.11. An attacker can exploit this vulnerability to acce...