编号撤回

This CVE number has been withdrawn...

BlueCMS suffers from SQL injection vulnerability (CNVD-2021-37563)

BlueCMS is a free professional local portal system developed by open source combination PHP + MYSQL. BlueCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Xionghai CMS suffers from SQL injection vulnerability (CNVD-2021-35843)

XIONGHAI CMS is a set of comprehensive website management system that can be widely used for personal blogs, personal websites and corporate websites. XIONGHAI CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

wesng

This is an offensive tool for Windows vulnerability exploitation. It is a Python-based tool called Windows Exploit Suggester - Next Generation WES-NG, which provides a list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. The tool uses the output of...

编号撤回

This CVE number has been withdrawn...

OpenClinic GA Command Injection Vulnerability

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management and other functions. A command injection vulnerability exists in OpenClinic GA version 5.173.3, which can be exploited by an attacker to...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. There is a security vulnerability in Junos OS for which no information is available at this time, so please...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. There is a security vulnerability in Junos OS. No information about this vulnerability is available at this...

Juniper Networks Junos OS 竞争条件问题漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. There is a security vulnerability in Junos OS. No information about this vulnerability is available at this...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29216)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

svelte 安全漏洞

Ben McCann svelte is a Ben McCann open source application. A compiler that works with declarative components and converts them to efficient JavaScript that can surgically update the DOM. Svelte suffers from a security vulnerability that can be exploited by an attacker to execute arbitrary code vi...

New Security Signals study shows firmware attacks on the rise; here’s how Microsoft is working to help eliminate this entire class of threats

Cybersecurity threats are always evolving, and today we’re seeing a new wave of advanced attacks targeting areas of computing that don’t have the protection of the cloud. New data shows that firmware attacks are on the rise, and businesses aren’t paying close enough attention to securing this...

New Security Signals study shows firmware attacks on the rise; here’s how Microsoft is working to help eliminate this entire class of threats

Cybersecurity threats are always evolving, and today we’re seeing a new wave of advanced attacks targeting areas of computing that don’t have the protection of the cloud. New data shows that firmware attacks are on the rise, and businesses aren’t paying close enough attention to securing this...

Backdoor.Win32.Delf.zs Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/911e96073cfe807289366343aa8d97ac.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Delf.zs Vulnerability: Unauthenticated Remote Command Execution Description: Backdoor...

编号撤回

This CVE number has been withdrawn...

SQL Injection Vulnerability in OurPHP (CNVD-2021-22605)

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. OurPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Open redirect

Rejected reason: Unused CVE for 2020...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-21531)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in OurPHP (CNVD-2021-18281)

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. OurPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

OSV - Open Source Vulnerability DB And Triage Service

OSV is a vulnerability database and triage infrastructure for open source projects aimed at helping both open source maintainers and consumers of open source. For open source maintainers, OSV's automation helps reduce the burden of triage. Each vulnerability undergoes automated bisection and impa...