Webmin Code Issue Vulnerability

Webmin is a set of Web-based system management tools for Unix-like operating systems. Webmin is vulnerable to a code issue. The vulnerability arises from an improper design or implementation during code development of a Web system or product. No details of the vulnerability are available at this...

WordPress wp-file-upload plugin code issue vulnerability (CNVD-2019-30984)

WordPress is a set of blogging platform developed by WordPress Foundation using PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. wp-file-upload is a file upload plugin used in it. There is a code issue vulnerability in the WordPress wp-file-upload plugi...

Glory Global RBW-100 Code Issue Vulnerability

The Glory Global RBW-100 is a bill collection device from Glory Global USA. A code issue vulnerability exists in the Glory Global RBW-100. An attacker could exploit the vulnerability to upload submitted data and execute code under their control on the file system...

Linux kernel code issue vulnerability (CNVD-2019-29597)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A code issue vulnerability exists in the sound/usb/helper.c file in versions of Linux kernel prior to 5.2.8. The vulnerability stems from an improperly designed or...

IBM InfoSphere Global Name Management Code Issue Vulnerability

IBM InfoSphere Global Name Management is a global name management solution from IBM, USA. The product is primarily used to manage, search, analyze and compare multicultural name datasets. A code issue vulnerability exists in IBM InfoSphere Global Name Management. An attacker could exploit the...

WordPress Meta Box Plugin Code Issue Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Meta Box plugin is a custom field plugin used in it. WordPress Meta Box plugin has a code issue vulnerability. No details of the...

3CX Phone system (web) management console code issue vulnerability

3CX Phone system web management console is a web-based management console program for the 3CX phone system. A code issue vulnerability exists in 3CX Phone system web management console versions 12.5.44178.1002 through 12.5 SP2. The vulnerability arises from an improperly designed or implemented...

exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp

In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunkint.cpp may cause a denial of service application crash due to a heap-based buffer over-read via a crafted PNG file...

Magento Code Issues Vulnerabilities

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A code issue vulnerability exists in Magento versions 2.1.18 before 2.1, 2.2.9 before 2.2.2, and 2.3.2 before 2.3...

WallacePOS Code Issue Vulnerability

WallacePOS is a web-based open source point of sale and retail management system. A code issue vulnerability exists in WallacePOS 1.4.3, which can be exploited by a remote authenticated attacker to execute arbitrary code by uploading a malicious PHP file...

Wind River Systems VxWorks Code Issue Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems. A code issue vulnerability exists in Wind River Systems VxWorks. The vulnerability arises from an improper design or implementation during code development for a networked system or product. No...

IBM Daeja ViewONE Virtual Code Issue Vulnerability

IBM Daeja ViewONE Virtual is an HTML5-based document and image viewer from IBM USA. The product is primarily used to view, annotate and print images and documents. A code issue vulnerability exists in IBM Daeja ViewONE Virtual. An attacker could exploit the vulnerability to disclose sensitive...

Terracotta Quartz Scheduler Code Issue Vulnerability

Terracotta Quartz Scheduler is an open source job scheduling framework . A code issue vulnerability exists in Terracotta Quartz Scheduler. The vulnerability stems from an improperly designed or implemented code development process for a networked system or product. An attacker can exploit this...

Axway SecureTransport Code Issue Vulnerability

Axway SecureTransport is a suite of applications for the secure transfer of files and data from the French company Axway. Axway SecureTransport is vulnerable to a code issue. The vulnerability stems from an improperly designed or implemented code development process for a networked system or...

LayerBB Code Issues Vulnerabilities

LayerBB is a small set of forum software. A code issue vulnerability exists in LayerBB version 1.1.3, which stems from the program not restricting the customlogo file name suffix. An attacker can exploit this vulnerability to upload arbitrary files...

Mitsubishi FR Configurator2 Code Issue Vulnerability

Mitsubishi FR Configurator2 is an inverter drive configuration application from Mitsubishi Electric Japan. A code issue vulnerability exists in Mitsubishi FR Configurator2 that stems from the program not filtering input passed to the XML parser. An attacker could exploit the vulnerability to read...

Multiple Qualcomm Products Code Issue Vulnerabilities

Qualcomm MDM9607 and others are products of Qualcomm Incorporated.The MDM9607 is a central processing unit CPU product.The MDM9640 is a central processing unit CPU product.The SDX24 is a modem.The MDM9640 is a central processing unit CPU product.The MDM9640 is a central processing unit CPU...

National Security Agency Ghidra Code Issue Vulnerability

National Security Agency Ghidra is a software reverse engineering SRE framework for the National Security Agency NSA. A code issue vulnerability exists in National Security Agency Ghidra versions prior to 9.0.1. The vulnerability stems from an improperly designed or implemented code development...

Pluck Code Issue Vulnerability

Pluck is a content management system CMS developed using the PHP language. A code issue vulnerability exists in the data/inc/images.php file in Pluck 4.7.4 and earlier versions. The vulnerability stems from an improperly designed or implemented code development process for a web-based system or...

SAP NetWeaver Application Server Java Code Issue Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integration of the application platform, the platform mainly for SAP applications to provide a development environment. The platform mainly for SAP applications to provide a development and runtime environment.SAP NetWeaver...