Binary vulnerability in jerryscript (CNVD-2020-72374)

erryScript is a lightweight JavaScript engine that runs on restricted devices. A binary vulnerability exists in jerryscript. An attacker could exploit this vulnerability to cause an impact on usability...

Google Android has an unspecified vulnerability (CNVD-2018-10037)

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9625 and other central processing unit CPU products from Qualcomm are used in different platforms. A security vulnerability exists in the Qualcomm...

CVE-2018-4121

creationtimestamp| type| source ---|---|--- 2018-04-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44427...

Information Disclosure

Moodle is vulnerable to information disclosures. The application sets certain group IDs to 0 upon a database-entry change, allowing a malicious user to view group-level entries after being edited by a user with a teacher role...

Provisioning Services: Support Statement for Multiple PVS Farms pointing to different Databases in one Subnet

Question: Can we boot targets using PXE boot in Subnet where we have 2 PVSServer in 2 different farms pointing to different database? Answer: This is not supported because when targets boot using PXE services, it broadcasts a packet and if it contacts a PVS Server which does not have entry for...

Microsoft Windows Journal File Handling Arbitrary Code Execution Vulnerability (CNVD-2015-03113)

Microsoft Windows is a popular operating system. A security vulnerability in Microsoft Windows' handling of specially crafted Journal .jnt files allows remote attackers to exploit the vulnerability to construct malicious files that can be parsed by a user and can be used in an application context...

CVE-2014-5354

plugins/kdb/ldap/libkdbldap/ldapprincipal2.c in MIT Kerberos 5 aka krb5 1.12.x and 1.13.x before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service NULL pointer dereference and daemon crash by creating a database entry for a keyless principal, as...

Information disclosure

mod/data/edit.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 sets a certain group ID to zero upon a database-entry change, which allows remote authenticated users to obtain sensitive information by accessing the database after an edit by a teacher...

CVE-2014-7833

mod/data/edit.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 sets a certain group ID to zero upon a database-entry change, which allows remote authenticated users to obtain sensitive information by accessing the database after an edit by a teacher...

CVE-2014-8295

creationtimestamp| type| source ---|---|--- 2014-10-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34851...

CVE-2014-5023

creationtimestamp| type| source ---|---|--- 2014-06-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33929...

CVE-2014-4166

creationtimestamp| type| source ---|---|--- 2014-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33714...

CVE-2014-2013

creationtimestamp| type| source ---|---|--- 2014-01-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31090...

CVE-2013-7186

creationtimestamp| type| source ---|---|--- 2013-12-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30032...

CVE-2013-3161

creationtimestamp| type| source ---|---|--- 2013-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28187...

CVE-2013-6127

creationtimestamp| type| source ---|---|--- 2013-09-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28084...

CVE-2013-4266

creationtimestamp| type| source ---|---|--- 2013-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24086...

CVE-2012-4772

creationtimestamp| type| source ---|---|--- 2012-10-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22159...

CVE-2012-4015

Cross-site scripting XSS vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry...

Cross site scripting

Cross-site scripting XSS vulnerability in the management screen in myLittleTools myLittleAdmin for SQL Server 2000 allows remote attackers to inject arbitrary web script or HTML via vectors that trigger a crafted database entry...