mysql: Server: Information Schema unspecified vulnerability (CPU Apr 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromis...

The vulnerability of the highly efficient pglogical logical replication system, related to the failure to cleanse input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the highly efficient pglogical logical replication system is related to the failure to perform data cleansing on input data. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the WordPress website content management system, related to the exposure of information, allows attackers to gain access to confidential data.

The vulnerability of the WordPress website content management system is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

SAP ERP 安全漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. SAP ERP has a security vulnerability that allows an attacker to register calls to certain functions that would otherwise be restricted to specific users. These functions are usually exposed over the network, and once...

The vulnerability of the Ansible configuration management system, related to the exposure of information, allows attackers to gain access to confidential data.

The vulnerability of the Ansible configuration management system is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

The vulnerability of the Python Requests HTTP request library relates to the lack of a mechanism for storing registration data, allowing attackers to access confidential information.

The vulnerability of the Python Requests HTTP request library is related to the lack of a mechanism for storing registration data. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

Design/Logic Flaw

Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions...

The vulnerability of the Cisco Data Center Network Manager system, related to errors in permission processing, allows a intruder to gain access to protected information.

The vulnerability of the Cisco Data Center Network Manager system is related to errors in permission processing. Exploiting this vulnerability can allow an attacker to gain access to protected information...

D-link DSL-2888A 默认配置问题漏洞

The D-link DSL-2888A is a Unified Services Router from D-link China. A default configuration issue vulnerability exists in the D-Link DSL-2888A devices, which can be exploited by an attacker to access system folders and download sensitive files e.g., password hash files...

Wuxi Xuncheng Information Technology Co., Ltd. website building system has SQL injection vulnerabilities

Wuxi Xuncheng Information Technology Co., Ltd. is an enhancement of corporate brand image, brand temperament, creative innovation, interactive experience, visual design, technology research and development as one of the integrated interactive design and innovation services enterprise, to provide...

The vulnerability of NSS libraries, related to deficiencies in the cryptographic algorithms used, allows attackers to gain access to confidential data.

The vulnerability of NSS libraries is related to deficiencies in the cryptographic algorithms used. Exploiting this vulnerability allows an attacker to gain access to confidential data...

SQL Injection Vulnerability in ECShop 4.1.0

ECShop is a professional e-commerce mall system. ECShop 4.1.0 suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information...

The vulnerability of the Microsoft Windows Graphics Component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Windows Graphics Component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

Information disclosure

A missing permission check in Jenkins MongoDB Plugin 1.3 and earlier allows attackers with Overall/Read permission to gain access to some metadata of any arbitrary files on the Jenkins controller...

Microsoft Outlook Information Disclosure Vulnerability (CNVD-2020-50144)

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. An information disclosure vulnerability exists in Microsoft Outlook. An attacker could exploit the vulnerability to access specific files...

YouDianCMS suffers from SQL injection vulnerability (CNVD-2020-56377)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability, attackers can use the vulnerability to obtain databas...

SQL Injection Vulnerability in the Website Building System of Beijing Turnaround Culture Development Co.

Beijing Turning Culture Development Co., Ltd. is the organization of various cultural and artistic exchanges, hosting exhibitions, books and magazines selection and editing, publishing agency, art design, painting and calligraphy framing exhibitions and displays exhibitions and sales, photography...

SQL injection vulnerability in Pr***.asp page of website building system of Liaocheng City Sky Network Technology Co.

Ltd. provides one-stop online marketing planning, training, website construction, website production, website optimization, Baidu optimization, site optimization, keyword ranking, promotion, operation, SEO optimization and other e-commerce solutions, is committed to serving the vast number of sma...

SQL injection vulnerability in pr***.asp page of Shijiazhuang Baicheng Network Technology Co.

Shijiazhuang Baicheng Network Technology Co., Ltd. is a marketing-oriented Internet enterprise focusing on Internet technology services, development and application. Shijiazhuang Baicheng Network Technology Co., Ltd. building system pr.asp page SQL injection vulnerability, attackers can use the...

Google Android System Information Disclosure Vulnerability (CNVD-2020-33218)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. System in Android version 10 has a security vulnerability that can be exploited by attackers to gain access to information...