xiycms backend has arbitrary file read vulnerability

xiycms is an open source and free enterprise content management system. xiycms backend has an arbitrary file read vulnerability. An attacker can exploit the vulnerability to read the database configuration file...

Weak password vulnerability in H3C GR2200 routers

The H3C GR2200 router is an enterprise-class router. A weak password vulnerability exists in the H3C GR2200 router. An attacker can exploit this vulnerability to log into the system backend and obtain sensitive information...

Command Execution Vulnerability in Tplay Backend

Tplay is a backend management framework based on ThinkPHP 5.0.13 + layui2.2.45 + Mysql development, PHP version required to upgrade to 5.5. A command execution vulnerability exists in Tplay backend. An attacker can exploit this vulnerability to gain server privileges...

SQL injection vulnerability in SeaCMS backend (CNVD-2021-14497)

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A SQL injection vulnerability exists in the backend of SeaCMS. An attacker can exploit this vulnerability to obtain sensitive information from the database...

FreeBSD -- Xen guests can triger backend Out Of Memory

Problem Description: Some OSes including Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbound, a guest may be able to trigger a OOM in the backend...

Unauthorized Access Vulnerability in JLWCS Backend Management System of Hubei Beijing Lun Group Co.

Hubei Beijing Lun Group Co., Ltd. is a diversified group. An unauthorized access vulnerability exists in the JLWCS back-end management system of Hubei Beijing Lun Group Co. Ltd. that can be exploited by an attacker to add an administrator account...

FreeBSD-SA-21:02.xenoom

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:02.xenoom Security Advisory The FreeBSD Project Topic: Xen guests can triger backend Out Of Memory Category: contrib Module: Xen Announced: 2021-01-29...

USN-4707-1: TCMU vulnerability

It was discovered that TCMU lacked a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request...

SQL injection vulnerability in songcms backend (CNVD-2021-12740)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

Command execution vulnerability in songcms backend (CNVD-2021-12674)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the backend of songcms. An attacker can...

SQL injection vulnerability in songcms backend (CNVD-2021-12736)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

SQL injection vulnerability in songcms backend (CNVD-2021-12738)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

SQL injection vulnerability in songcms backend (CNVD-2021-12737)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

SQL injection vulnerability in songcms backend (CNVD-2021-12739)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

SQL injection vulnerability in songcms backend (CNVD-2021-12735)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

Command Execution Vulnerability in songcms Backend

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the backend of songcms. An attacker can...

Local Service Search Engine Management System SQL注入漏洞

Local Service Search Engine Management System is a simple PHP/MySQLi project. SQL injection vulnerability exists in Local Service Search Engine Management System 1.0, which stems from a failure to properly validate input information and can be exploited to bypass the login page and gain backend...

ProjectSend Security Vulnerability

ProjectSend formerly cFTP is a suite of self-hosted applications based on PHP and MySQL. ProjectSend before r1295 suffers from a security vulnerability that incorrectly resets passwords due to faulty business logic...

openSUSE Security Update : the Linux Kernel (openSUSE-2021-75)

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : - CVE-2020-29568: An issue was discovered in Xen through 4.14.x. Some OSes such as Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the even...

Apache Nutch 代码问题漏洞

Apache Nutch is a Java-based scalable crawler software from the Apache Foundation. Versions of Apache Nutch prior to 1.18 suffer from an XML external entity injection vulnerability that allows an attacker to view files on the application server file system and interact with any backend or externa...