Uppy 代码问题漏洞

Uppy is an open source file uploader for web browsers from Transloadit Open Source. A code issue vulnerability exists in uppy that allows an attacker to conduct server-side request forgery SSRF attacks...

Talkyard 代码问题漏洞

Talkyard is an open source structured discussion platform that brings together key features of StackOverflow, Slack, Discourse, Reddit/HackerNews, and Disqus blog comments.Talkyard suffers from a code issue vulnerability that could be exploited by an attacker to reuse an administrator's still val...

Stormshield Network Security Code Issue Vulnerability

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. Stormshield Network Security SNS suffers from a code issue vulnerability that stems from the first SSH password change not properly clearing the old password under certain update...

Stormshield Network Security 代码问题漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. Stormshield Network Security SNS suffers from a code issue vulnerability that stems from the first SSH password change not properly clearing the old password under certain update...

Google Android code issue vulnerability (CNVD-2021-103425)

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android is vulnerable to a code issue that could be exploited by attackers to crash Bluetooth services...

GPAC Code Issue Vulnerability (CNVD-2022-04962)

GPAC is an open source multimedia framework. version 1.1.0 of GPAC is vulnerable to a code issue that could be exploited by attackers to cause segmentation errors and application crashes...

Apache HTTP Server Code Issue Vulnerability

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A code issue vulnerability exists in Apache HTTP Server that stems from a null pointer reference error in the product. The...

GPAC Code Issue Vulnerability (CNVD-2022-03661)

GPAC is an open source multimedia framework. GPAC is vulnerable to a code issue that could be exploited by attackers to cause segmentation errors and application crashes...

Quest KACE Desktop Authority Code Issue Vulnerability

Quest KACE Desktop Authority is a desktop management software from Quest Inc. A code issue vulnerability exists in Quest KACE Desktop Authority, which can be exploited by attackers to remotely execute code...

Gnuplot code issue vulnerability

Gnuplot is a command-line interactive tool that allows users to enter commands to convert data data and data functions into easy-to-see flat or three-dimensional graphs A code problem vulnerability exists in Gnuplot, which stems from the boundary3d function in the product's graph3d.c file that...

GPAC 代码问题漏洞

GPAC is an open source multimedia framework. version 1.1.0 of GPAC is vulnerable to a code issue that could be exploited by attackers to cause segmentation errors and application crashes...

Quest KACE Desktop Authority 代码问题漏洞

Quest KACE Desktop Authority is a desktop management software from Quest Inc. A code issue vulnerability exists in Quest KACE Desktop Authority, which can be exploited by attackers to remotely execute code...

Apache NiFi code issue vulnerability (CNVD-2021-102797)

Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. A code issue vulnerability exists in Apache NiFi's TransformXML, which stems from a vulnerability in Apache NiFi's...

crocoblock JetEngine code issue vulnerability

crocoblock JetEngine is a dynamic content plugin that allows you to build complex websites quickly and cost-effectively. crocoblock JetEngine versions prior to 2.9.1 are vulnerable to a code issue that stems from the application's inability to properly validate and clean up form data. An attacker...

Knime Analytics Platform code issue vulnerability

Knime Analytics Platform is a free open source data analysis, reporting and integration platform from the Swiss company Knime.KNIME Analytics Platform versions prior to 4.5.0 contain a code issue vulnerability that can be exploited by attackers to conduct XXE attacks via crafted workflow files...

Adobe Experience Manager Code Issue Vulnerability

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. Adobe...

PatrOwl code issue vulnerability

PatrOwl is an extensible, free and open source solution for orchestrating secure operations. PatrOwl is vulnerable to a code issue vulnerability that allows dangerous types of files to be uploaded to the server, which could be exploited by an attacker to cause XSS attacks and potentially other...

Knime Analytics Platform 代码问题漏洞

Knime Analytics Platform is a free open source data analysis, reporting and integration platform from the Swiss company Knime.KNIME Analytics Platform versions prior to 4.5.0 contain a code issue vulnerability that can be exploited by attackers to conduct XXE attacks via crafted workflow files...

Pluck code issue vulnerability (CNVD-2021-100243)

Pluck is a content management system CMS developed using the PHP language. a code issue vulnerability exists in Pluck, which originates from the product's admin backend page that does not validate file content. An attacker could execute malicious commands through this vulnerability...

Adobe Experience Manager代码问题漏洞

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. Adobe...