2852 matches found
CVE-2021-28354 Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Code Execution Vulnerability in Super CMS
Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...
Sourcecodester Simple College Website Code Execution Vulnerability
Sourcecodester Simple College Website is a content management system of Sourcecodester. version 1.0 of Sourcecodester Simple College Website contains a code execution vulnerability that can be exploited by attackers to conduct remote code execution...
vscode-rufo code execution vulnerability
vscode-rufo is a Visual Studio code through Rufo provides formatting extensions to the application. A code execution vulnerability exists in vscode-rufo in versions prior to 0.0.4, which can be exploited by an attacker to execute arbitrary code on a system...
Code Execution Vulnerability in CMS Content Management System of Chengdu JINWEI TECHNOLOGY Co.
Chengdu today network technology limited company scope of business: computer hardware and software development; computer hardware and software technology services, computer information technology consulting services; computer network engineering construction, etc.. Code execution vulnerability...
GitLab gitlab-vscode-extension 代码问题漏洞
Gitlab gitlab-vscode-extension is a VSCode code editor extension for Gitlab from Gitlab USA. A code issue vulnerability exists in versions prior to gitlab-vscode-extension v3.15.0 that allows an attacker to execute code on a user's system...
CVE-2020-35308
CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code...
Code Execution Vulnerability in Fish Leap CMS
FishLeap CMS is a content management system specifically geared towards enterprise applications. A code execution vulnerability exists in the Fish Leap CMS, which can be exploited by an attacker to write a malicious file to gain server control privileges...
inoERP download.php Insecure Deserialization (CVE-2019-16894)
An Insecure Deserialization vulnerability exists in Inoideas inoERP. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
CVE-2021-21783
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability...
Cisco Jabber Code Execution Vulnerability (CNVD-2021-22912)
Cisco Jabber is a web conferencing and instant messaging application that allows users to send messages over the Extensible Messaging and Status Protocol XMPP. A code execution vulnerability exists in Cisco Jabber, which is caused by incorrect validation of message content. An attacker can send...
Zoho ManageEngine Desktop Central Code Execution Vulnerability (CNVD-2021-28712)
ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A security...
Code execution vulnerability in ShuipFCMS (NVD-C-2021-75467)
ShuipFCMS is a content management system based on ThinkPHP framework as the core and developed in an independent grouping approach. ShuipFCMS suffers from a code execution vulnerability that can be exploited by an attacker to gain control of the server...
XStream 代码问题漏洞
XStream is a simple Java-based library , Java objects serialized to xml and vice versa i.e. : Java objects and xml documents can be easily converted to each other . A code execution vulnerability exists in XStream, which can be exploited by an attacker to manipulate the processed input stream and...
Code execution vulnerability in geeweb
geeweb is a PHP MySQL-based development to completely free, fast site, easy maintenance, high security, strong load force, SEO friendly and other features, for the small and medium-sized enterprises, social groups, schools and individual users, such as the station-building system. A code executio...
OPENSUSE-SU-2021:0447-1 Security update for velocity
This update for velocity fixes the following issues: - CVE-2020-13936: Fixed an arbitrary code execution when attacker is able to modify templates bsc1183360. This update was imported from the SUSE:SLE-15-SP2:Update update project...
Description of the security update for Office 2013: March 9, 2021 (KB4493203)
Description of the security update for Office 2013: March 9, 2021 KB4493203 Summary This security update resolves Microsoft Excel Remote Code Execution Vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and Exposures...
IBM DataPower Gateway Server-Side Request Forgery Vulnerability
IBM DataPower Gateway is a security and integration platform built specifically for mobile, cloud, API, web, SOA, B2B and cloud workloads. A server-side request forgery vulnerability exists in IBM DataPower Gateway 10.0.0.0-10.0.1.1, 2018.4.1.0-2018.4.1.14. A local attacker with administrative...
CVE-2020-28636
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop slh-twin An attacker can provide malicious input to trigger this vulnerability...
CGAL 输入验证错误漏洞
Libcgal is an open source C++ library that provides geometric algorithms for fast and reliable data processing. CGAL libcgal NefS2/SNCioparser.h in CGAL-5.1.1 SNCioparser::readsloop slh-incidentsface suffers from an out-of-bounds read vulnerability, which can be exploited by an attacker to achiev...