2649 matches found
Number withdrawn
This CVE number has been withdrawn...
Trojan.Win32.Cospet.abg Insecure Permissions
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/5f5b308853b9aa9243390c135ff6ba1b.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Cospet.abg Vulnerability: Insecure Permissions EoP Description: Cospet.abg, creates an...
vulscan
This is a Python-based web application for vulnerability scanning and management. The application is built using Django and has several features, including: 1. Vulnerability Scanning: The application can scan for vulnerabilities in web applications using a variety of plugins POCs. 2. Plugin...
Number withdrawn
This CVE number has been withdrawn...
Apple Apple iOS Security Breach
Apple iOS is an operating system developed by Apple Inc. for mobile devices. There is a security vulnerability in Apple iOS. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...
SQL Injection Vulnerability in LJCMS (CNVD-2021-10525)
LJCMS is a free and open source content management system. LJCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about the database...
A week in security (January 11 – January 17)
Last week on Malwarebytes Labs, we looked at IoT problems, Microsoft’s Patch Tuesday, and how cybercriminals want access to your cloud services. We also explored how VPNs can protect your privacy, and asked if MSPs have picked the right PSA. Other cybersecurity news Hot phishing targets: Some...
Remote code execution
Microsoft Word Remote Code Execution Vulnerability...
K7 Computing K7AntiVirus Premium Buffer Overflow Vulnerability (CNVD-2021-02816)
K7AntiVirus Premium is a security suite from K7 Computing that provides reliable protection against online threats and fraudulent activities, thus protecting you from viruses and cyber attacks. A buffer overflow vulnerability exists in K7 Computing K7AntiVirus Premium 15.01.00.53. No detailed...
Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04398)
Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...
Google Chrome memory misreference vulnerability (CNVD-2021-04420)
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in "Drag and Drop" in Google Chrome prior to version 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...
WordPress site-offline plugin cross-site request forgery vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in the WordPress site-offline plugin prior to...
Number withdrawn
This CVE number has been withdrawn...
HGiga MailSherlock SQL Injection Vulnerability (CNVD-2021-05402)
HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. HGiga MailSherlock suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to inject and execute SQL commands in URL parameters...
Foxit Reader and PhantomPDF null pointer dereference vulnerability (CNVD-2021-04406)
Foxit Reader is a Chinese Foxit Foxit company's a PDF document reader. mPDF is a use of PHP written for the conversion of HTML into PDF documents library. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker can exploit the vulnerability to cause the application to crash...
JerryScript has a binary vulnerability (CNVD-2020-72438)
JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...
JerryScript has a binary vulnerability (CNVD-2020-72435)
JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...
JerryScript has a binary vulnerability (CNVD-2020-72426)
JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...