Arbitrary Code Execution Vulnerability in Ocean Cms Backend

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. There is an arbitrary code execution vulnerability in the backend of SeaCMS, which can be exploited by attackers to gain control of the server...

Qt WebEngine: Multiple vulnerabilities

Background Library for rendering dynamic web content in Qt5 C++ and QML applications. Description Multiple vulnerabilities have been discovered in Qt WebEngine. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details...

About the security content of iOS 14.4 and iPadOS 14.4

About the security content of iOS 14.4 and iPadOS 14.4 This document describes the security content of iOS 14.4 and iPadOS 14.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-13490)

Extreme CMS is open source and free PHPCMS web content management system. Extreme CMS suffers from a SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in WDJA Web Content Management System

WDJA Web Content Management System is a set of existing modules can be expanded and cloned PHP open source CMS system , using UTF-8 encoding , to take the language/code/program two separate technical modes . WDJA Web Content Management System has a SQL injection vulnerability that can be exploite...

Arbitrary File Deletion Vulnerability in UCMS

UCMS is a simple web content management system. UCMS has an arbitrary file deletion vulnerability that can be exploited by an attacker to arbitrarily delete files...

SQL Injection Vulnerability in ad***_to***_ne***.php File in SeaCMS Backend

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A SQL injection vulnerability exists in the adtone.php file in the background of SeaCMS. Attackers can use the vulnerability to obtain sensitive information in the database...

Arbitrary File Deletion Vulnerability in SeaCMS (CNVD-2021-03400)

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS has an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...

Arbitrary File Deletion Vulnerability in SeaCMS

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS has an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...

Directory traversal vulnerability in SeaCMS backend (CNVD-2021-03413)

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A directory traversal vulnerability exists in the SeaCMS backend. An attacker can exploit the vulnerability by constructing a malicious payload to view any directory file on...

SQL injection vulnerability in SeaCMS backend (CNVD-2021-03454)

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A SQL injection vulnerability exists in the backend of SeaCMS. Attackers can use the vulnerability to obtain sensitive information in the database...

Command execution vulnerability in SeaCMS backend (CNVD-2021-03440)

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A command execution vulnerability exists in the SeaCMS backend. An attacker can exploit this vulnerability to gain server privileges...

WebkitGTK+: Multiple vulnerabilities

Background WebKitGTK+ is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, from hybrid HTML/CSS applications to full-fledged web browsers. Description Multiple vulnerabilities have been discovered in WebKitGTK+. Please review the CVE...

MGASA-2020-0462 Updated thunderbird packages fix security vulnerabilities

When a BigInt was right-shifted the backing store was not properly cleared, allowing uninitialized memory to be read CVE-2020-16042. Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow in WebGL on some video drivers CVE-2020-26971. Certain inpu...

CVE-2020-26964

If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have connected to the feature and operated with the privileges of the browser to read and interact with web content. The feature was implemented as a unix...

CVE-2020-26964

If the Remote Debugging via USB feature was enabled in Firefox for Android on an Android version prior to Android 6.0, untrusted apps could have connected to the feature and operated with the privileges of the browser to read and interact with web content. The feature was implemented as a unix...

DEBIAN-CVE-2020-27918

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary...

CVE-2020-27918

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary...

Design/Logic Flaw

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, Safari 14.0.1, tvOS 14.2, iTunes 12.11 for Windows. Processing maliciously crafted web content may lead to arbitrary...

CVE-2020-27926

A use after free issue was addressed with improved memory management. This issue is fixed in iOS 14.2 and iPadOS 14.2. Processing maliciously crafted web content may lead to arbitrary code execution...