546 matches found
CSCMS Music Portal System SQL注入漏洞
CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the id parameter in /admin.php/user/leveldel that lacks validation of externally...
CVE-2021-45837
It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X 4.2.15-2107141517 by sending a specifically crafted input to /tos/index.php?app/del...
Control de Ciber 资源管理错误漏洞
Control de Ciber is a network control software from Ciber Control open source. A security vulnerability exists in Control de Ciber. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...
CVE-2021-45994
Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers to cause a Denial of Service DoS via the delDhcpIndex parameter...
CVE-2021-45994
Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a stack overflow in the function formDelDhcpRule. This vulnerability allows attackers to cause a Denial of Service DoS via the delDhcpIndex parameter...
CVE-2021-40569
The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the ilocentrydel funciton in boxcodemeta.c, which allows attackers to cause a denial of service...
DEBIAN-CVE-2021-40569
The binary MP4Box in Gpac through 1.0.1 has a double-free vulnerability in the ilocentrydel funciton in boxcodemeta.c, which allows attackers to cause a denial of service...
GPAC 资源管理错误漏洞
GPAC is an open source multimedia framework. A resource management error vulnerability exists in GPAC, which stems from the gflistdel function in the product list.c file releasing memory multiple times. An attacker could cause a denial of service via this vulnerability...
CVE-2020-28103
cscms v4.1 allows for SQL injection via the "pagedel" function...
CVE-2021-21909
Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. An attacker can provide malicious inputs to trigger this vulnerability...
CVE-2021-21909
CVE-2021-21909 affects Garrett Metal Detectors iC Module CMA Version 5.0. Affected component is the CMA CLI (del/delenv) exposed over TCP (port 6877) with an authenticated CLI. Root cause is improper validation/sanitization of the user-supplied file argument in handle_delete/delEnv, allowing dire...
PT-2021-24218 · Gpac · Gpac
Name of the Vulnerable Software and Affected Versions: gpac version 1.1.0 Description: An invalid free vulnerability exists via the gf sg command del function, which causes a segmentation fault and application crash. Recommendations: For gpac version 1.1.0, consider disabling the gf sg command de...
CVE-2020-29177
Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \appdel.php...
CVE-2021-24711
The delreistereddomains AJAX action of the Software License Manager WordPress plugin before 4.5.1 does not have any CSRF checks, and is vulnerable to a CSRF attack...
UBUNTU-CVE-2021-32270
An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwidboxdel located in boxcodebase.c. It allows an attacker to cause Denial of Service...
Prototype Pollution
object-path is vulnerable to Prototype Pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype via the del function...
PT-2021-21941 · Npm +2 · Object-Path +2
Name of the Vulnerable Software and Affected Versions: object-path affected versions not specified Description: The issue is related to Improperly Controlled Modification of Object Prototype Attributes, also known as 'Prototype Pollution'. This occurs because the del function does not properly...
UBUNTU-CVE-2021-3640
A flaw use-after-free in function scosocksendmsg of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIOREGISTER or other way triggers race condition of the call scoconndel together with the call scosocksendmsg with the expected controllable faulting memory page. A privilege...
PT-2024-11352 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a possible use-after-free in the nicstar cleanup function. The problem arises because the del timer function does not wait for the timer handler to finish, whic...