296 matches found
Moderate: 389-ds:1.4 security and bug fix update
389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: syncrepl NULL pointer dereference in synccreatestatecontrol...
CVE-2020-18667
SQL Injection vulnerability in WebPort =1.19.1 via the new connection, parameter name in type-conn...
CVE-2020-18667
SQL Injection vulnerability in WebPort =1.19.1 via the new connection, parameter name in type-conn...
CVE-2020-18664
Cross Site Scripting XSS vulnerability in WebPort =1.19.1via the connection name parameter in type-conn...
PT-2021-10203
Name of the Vulnerable Software and Affected Versions: WebPort versions 1.19.1 and earlier Description: A Cross Site Scripting XSS issue exists via the connection name parameter in type-conn. This allows for potential malicious script execution. The estimated number of potentially affected device...
PT-2021-10206
Name of the Vulnerable Software and Affected Versions: WebPort versions prior to 1.19.1 Description: The issue is related to a SQL Injection vulnerability. It can be exploited via the new connection, specifically through the parameter name in type-conn. Recommendations: For versions prior to...
WebPort 跨站脚本漏洞
WebPort is a remote access and preventive maintenance device. It enables access to control system data and devices. A security vulnerability exists in WebPort =1.19.1 that stems from an xss vulnerability via the connection-name parameter in type-conn...
CVE-2020-18667: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in WebPort =1.19.1 via the new connection, parameter name in type-conn...
CVE-2021-29350
SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to admin/productadd.php...
CVE-2021-29350
SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to admin/productadd.php...
发货100-设计素材下载系统 SQL注入漏洞
Shipping 100 - Design Material Download System is a software application. It provides a function to download materials. Shipment 100-Design Material Download System 1.1 SQL injection vulnerability exists, the vulnerability stems from SQL injection in the getip function in conn function.php...
CVE-2021-29350: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to admin/productadd.php...
OESA-2021-1006 memcached security update
Memcached is a high-performance, distributed memory object caching system, generic in nature, but originally intended for use in speeding up dynamic web applications by alleviating database load. You can think of it as a short-term memory for your applications.\r\n\r\n Security Fixes:\r\n\r\n...
Linux kernel resource management error vulnerability (CNVD-2019-41703)
Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A vulnerability exists in the 'mlx5fpgaconncreatecq' in the drivers/net/ethernet/mellanox/mlx5/core/fpga/conn.c file in versions of the Linux kernel prior to 5.3.11...
PT-2019-4092
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.11 Description The issue is related to a memory leak in the mlx5 fpga conn create cq function, which can lead to a denial of service due to memory consumption. This can be triggered by causing mlx5 vector2eqn...
Memcached Buffer Overflow Vulnerability
Memcached is the United States Brad Fitzpatrick Brad Fitzpatrick software developers of a high-performance distributed memory object caching system. The system by caching data and objects in memory to reduce the number of times to read the database , thus improving the speed of access to the site...
PT-2019-4903
Name of the Vulnerable Software and Affected Versions memcached version 1.5.16 Description The issue is related to a stack-based buffer over-read in the conn to str function in memcached.c. This can be exploited by a remote attacker to cause a denial of service. Recommendations For memcached...
PT-2019-14257
Name of the Vulnerable Software and Affected Versions rustls crate versions prior to 0.16.0 Description The issue allows attackers to cause a denial of service by arranging for a client to never be writable, resulting in a loop of conn event and ready. Recommendations For versions prior to 0.16.0...
PT-2019-19366
Name of the Vulnerable Software and Affected Versions msm gpu driver for custom Linux kernels on the Xiaomi perseus-p-oss MIX 3 device through 2018-11-26 Description The issue is caused by an integer overflow due to missing checks of the count argument in the sde debugfs conn cmd tx write functio...