phpMyFAQ command injection vulnerability

phpMyFAQ is a multilingual, fully database-driven FAQ system. phpMyFAQ versions prior to 3.1.11 contain a command injection vulnerability, which stems from command injection. No detailed vulnerability details are currently available...

D-Link DIR-882 Buffer Overflow Vulnerability

D-Link DIR-882 is a wireless router from China Youxun D-Link.D-Link DIR-882 DIR882A1FW130B06 has a security vulnerability that stems from a PSK parameter found through the SetQuickVPNSettings module that contains a stack overflow. No detailed vulnerability details are currently available...

GNU LibreDWG Stack Overflow Vulnerability

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG is vulnerable to a stack overflow vulnerability, for which no detailed vulnerability details are currently available...

KevinLAB Building Energy Management System跨站请求伪造漏洞

KevinLAB Building Energy Management System is a building energy management system from KevinLAB Korea.A cross-site request forgery vulnerability exists in KevinLAB Building Energy Management System version 4ST BEMS 1.0.0 and is currently No detailed vulnerability details are available...

Microsoft Windows DWM Core Library Elevation of Privilege Vulnerability

Microsoft Windows is a set of operating systems for personal devices used by the U.S. Microsoft Windows DWM Core Library has an elevation of privilege vulnerability, for which no detailed vulnerability details are available...

Construction Industry Solutions Conis Construction Cloud存在未明漏洞

Construction Industry Solutions Conis Construction Cloud is an end-to-end cloud and mobile software solution from Construction Industry Solutions, Inc. A security vulnerability exists in Construction Industry Solutions Conis Construction Cloud due to a design or implementation impropriety in the...

Yetiforcecrm Cross-site Request Forgery Vulnerability

YetiForceCrm is an open source Crm system from the Polish company YetiForce. Yetiforcecrm suffers from a cross-site request forgery vulnerability, for which no detailed vulnerability details are currently available...

Microsoft Visual Studio和Internet Explorer未明远程代码执行漏洞

Bugraq ID: 35804 CNCAN ID：CNCAN-2009072803 Microsoft Visual Studio是一款微软公司的开发工具套件系列产品。 Microsoft Internet Explorer是一款流行的WEB浏览器。 Blackhat会议公布了Microsoft Visual Studio和Internet Explorer的未明安全问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 目前没有详细漏洞细节提供。 Microsoft Visual Studio 2008 SP1 Microsoft Visual Studio 2008 0...