CVE-2022-1353

A vulnerability was found in the pfkeyregister function in net/key/afkey.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information...

CVE-2021-35962

Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter special characters. Remote attackers can apply Path Traversal means to download credential files from the system without permission...

Johnson Controls Metasys 安全漏洞

Johnson Controls Metasys system is the United States Johnson Controls Johnson Controls company's set of building automation system. A security vulnerability exists in Johnson Controls Metasys version 11.0 and prior versions that can be exploited by an attacker to send specially crafted web messag...

Weak Password Vulnerability in Ruiyou Yilian Remote Access System

Xingtai Zhigong Software Service Center Dingzhi Technology, is a company focusing on the Shenzhou Zhigong series of miniature specialty store management software development services. A weak password vulnerability exists in the Ruiyou Yilian remote access system, which can be exploited by attacke...

Path traversal

The specific function in ASUS BMC’s firmware Web management page Record video file function does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files...

ASUS BMC Firmware 路径遍历漏洞

ASUS BMC Firmware is a firmware from Asus China. The ASUS BMC Firmware suffers from a path traversal vulnerability that stems from the Record video file function not filtering specific parameters. A remote attacker could use this vulnerability to gain administrator privileges and then traverse...

PT-2021-17825

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue concerns a function in the ASUS BMC's firmware Web management page, specifically the Delete video file function, which fails to filter a specific parameter. This allows remote...

PT-2021-17824

Name of the Vulnerable Software and Affected Versions: ASUS BMC affected versions not specified Description: The issue concerns a specific function in the ASUS BMC's firmware Web management page, namely the Get video file function, which fails to filter a specific parameter. This allows remote...

Vulnerabilities fixed in FreeBSD

Several vulnerabilities have been fixed in FreeBSD. The vulnerabilities allow a malicious person, potentially unauthenticated remote, be able to carry out attacks resulting in the following categories of damage: Bypassing authentication Bypassing security measure Accessing sensitive data Access t...

CVE-2020-12495

The CVE-2020-12495 entry concerns Endress+Hauser Ecograph T (Neutral/Private Label) devices (RSG35, ORSG35) with firmware

VulnCheck KEV: CVE-2019-7194

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files...

SQL Injection Vulnerability in ERS Authorized Access System

Authorized access system IRAS Information Remote Access System system is launched by Infosys, is the realization of the architecture in the interconnection of the Internet based on the public data sharing services, the system uses JAVA2.0 technology, Eclipse as the development platform, JAVA as t...

XML External Entity (XXE)

selenium-firefox-driver is vulnerable to XML external entity attacks. External DTD declarations are not disabled, allowing a remote attacker to perform server-side request forgery attacks, local port scanning, access system files and possibly a denial of service attack...

CVE-2019-5604

In FreeBSD 12.0-STABLE before r350246, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350247, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, the emulated XHCI device included with the bhyve hypervisor did not properly validate data provided by the guest,...

PT-2019-2409

Name of the Vulnerable Software and Affected Versions DIRECTUM affected versions not specified Description The issue is related to a module vulnerability in the web access system of DIRECTUM, which is connected to weaknesses in the authentication procedure. This could allow a remote attacker to...

CVE-2017-6925

In versions of Drupal 8 core prior to 8.3.7; There is a vulnerability in the entity access system that could allow unwanted access to view, create, update, or delete entities. This only affects entities that do not use or do not have UUIDs, and entities that have different access restrictions on...

CVE-2017-6925

Drupal 8 core before 8.3.7 contains an entity access system vulnerability (CVE-2017-6925) that could allow a remote attacker to view, create, update, or delete entities for which UUIDs are missing or where revision-based access differs. Affected versions are Drupal 8 core prior to 8.3.7; the issu...

CVE-2017-6925: Undefined Security Weakness

In versions of Drupal 8 core prior to 8.3.7; There is a vulnerability in the entity access system that could allow unwanted access to view, create, update, or delete entities. This only affects entities that do not use or do not have UUIDs, and entities that have different access restrictions on...

PT-2019-8596

Name of the Vulnerable Software and Affected Versions Drupal 8 core versions prior to 8.3.7 Description There is an issue in the entity access system that could allow unwanted access to view, create, update, or delete entities. This issue affects entities that do not use or do not have UUIDs, and...

Logic Flaw Vulnerability in Remote Access System of Chengdu Liantu Technology Co.

Liantu Education is a national high-tech enterprise. The company is mainly engaged in software platforms for education, scientific research and public culture systems, course services, dual-creation guidance for college students, database construction and other related products. There is a logic...