811 matches found
CVE-2022-29670: Improper Neutralization of Special Elements used in an SQL Command
CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/del...
PT-2022-19778
Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the CSCMS Music Portal System. This issue is related to the id parameter at the "/admin.php/Label/js del" API endpoint. Recommendations For CSCMS Music...
PT-2022-19776
Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the id parameter at the /admin.php/vod/admin/topic/del API endpoint. This allows for potential exploitation. Recommendations For version 4.2, avoid usin...
PT-2022-19763
Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin.php/pic/admin/pic/del" API endpoint. Recommendations For CSCMS Mus...
PT-2022-19774
Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A blind SQL injection issue was found in the CSCMS Music Portal System. The issue is related to the id parameter at the "/admin.php/user/zu del" API endpoint. This allows for potential...
PT-2022-19066
Name of the Vulnerable Software and Affected Versions dhcms version 20170919 Description The issue allows for arbitrary folder deletion via the /admin.php?r=admin/AdminBackup/del API endpoint. This could potentially lead to data loss or disruption of service. No information is provided about the...
CVE-2022-28527: Improper Limitation of a Pathname to a Restricted Directory
dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del...
CVE-2021-45837
It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X 4.2.15-2107141517 by sending a specifically crafted input to /tos/index.php?app/del...
CVE-2021-45837: Undefined Security Weakness
It is possible to execute arbitrary commands as root in Terramaster F4-210, F2-210 TOS 4.2.X 4.2.15-2107141517 by sending a specifically crafted input to /tos/index.php?app/del...
PT-2022-29465
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to refcount leaks caused by the ax25 cb del function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...
PT-2022-30346
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.112 Description The issue is related to refcount leaks caused by the ax25 cb del function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior...
PT-2022-30509
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.190 Description The issue is related to refcount leaks caused by the ax25 cb del function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...
PT-2022-30098
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.35 Description The issue is related to refcount leaks caused by the ax25 cb del function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior ...
PT-2025-8238
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue was found in the Linux kernel, specifically in the sa1100 set termios function. This occurs when two threads attempt to access the same lock, resulting in a situation...
PT-2025-8239
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue exists in the Linux kernel, specifically in the ieee80211 beacons stop function. This occurs when two threads attempt to access the ieee-beacon lock simultaneously,...
PT-2025-8249
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A deadlock issue exists in the Linux kernel, specifically in the rtllib beacons stop function. This occurs when two threads attempt to access the ieee-beacon lock simultaneously, causing...
PT-2022-18395
Name of the Vulnerable Software and Affected Versions Cscms Music Portal System version 4.2 Description The issue is related to a SQL injection vulnerability. It affects the component dance Dance.php del. Recommendations For Cscms Music Portal System version 4.2, consider restricting access to th...
PT-2022-18397
Name of the Vulnerable Software and Affected Versions Cscms Music Portal System version 4.2 Description The issue is related to a SQL injection vulnerability. It affects the component dance Topic.php del. Recommendations For Cscms Music Portal System version 4.2, consider restricting access to th...
Control de Ciber 资源管理错误漏洞
Control de Ciber is a network control software from Ciber Control open source. A security vulnerability exists in Control de Ciber. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...
PT-2025-8039
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17.0-rc5 Description A use-after-free issue has been identified in the Linux kernel's Bluetooth functionality, specifically in the hci send acl function. This issue arises when the HCI EV DISCONN PHY LINK...