9169 matches found
SQL injection vulnerability exists in the open-source version of the UX365 web site navigation (CNVD-2021-24438)
Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of the existence of SQL injection vulnerability . Attackers can exploit the vulnerability to...
SQL injection vulnerability exists in the open-source version of the UX365 web site navigation (CNVD-2021-24439)
Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of the existence of SQL injection vulnerability . Attackers can exploit the vulnerability to...
The vulnerability of the Microsoft Visual Studio Code Remote Development Extension allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio Code Remote Development Extension is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2020-4851
IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190450...
Code injection
IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190450...
Rapid7 Announces Release of New tCell Amazon CloudFront Agent
Cloud-native approaches to building, hosting, and delivering web applications are growing rapidly. Content delivery networks CDNs such as Amazon CloudFront are on the rise, pushing content closer to end users to improve the performance of web applications. To protect web applications security tea...
SQL injection vulnerability in the open source version of UX365 website navigation
Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of the existence of SQL injection vulnerability . Attackers can exploit the vulnerability to...
[SECURITY] Fedora 33 Update: python-pillow-7.2.0-5.fc33
Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...
XSS vulnerability in the open-source version of UX365 website navigation
Youkai 365 Web site navigation open source version is an open source web site based on PHP + MYSQL development and construction of category management system . Uke 365 URL navigation open source version of the existence of XSS vulnerabilities , attackers can exploit the vulnerability to obtain us...
Amazon ECS Exec Now Works with Containers in AWS Fargate
Building in containers offers amazing benefits for development teams – speed, agility, flexibility, scalability, etc...
[SECURITY] Fedora 32 Update: python-django-3.0.13-1.fc32
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
CVE-2021-28361
An issue was discovered in Storage Performance Development Kit SPDK before 20.01.01. If a PDU is sent to the iSCSI target with a zero length but data is expected, the iSCSI target can crash with a NULL pointer dereference...
CVE-2021-28361
CVE-2021-28361 affects Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with zero length (but data is expected), the iSCSI target can crash due to a NULL pointer dereference, impacting availability (CVSS v3.1: High). The issue is tied to SPDK’s iSCS...
Storage Performance Development Kit 代码问题漏洞
Storage Performance Development Kit SPDK is a storage performance development kit from the SPDK community. The product is primarily used for writing high-performance, scalable user-mode storage applications. A security vulnerability exists in Storage Performance Development Kit before 20.01.01,...
SQL Injection Vulnerability in the Enterprise Management System for Building Materials of Xiangyang Softpro Information Technology Co.
Ltd. is located in Room 2-2712, Jinxiu Tianchi SOHO-A1 Building, Checheng Road, High-tech Zone, Xiangyang City, Hubei Province, is a high-tech enterprise specializing in software development, mobile software customization, software sales and implementation. Ltd.'s Softpro Building Materials...
QCubed 3.1.1 SQL Injection Vulnerability
QCubed SQL Injection ================== | Target: | QCubed Framework | | Vendor: | QCubed | | Version: | all versions including 3.1.1 | | CVE: | CVE-2020-24913 | | Accessibility: | Remote | | Severity: | Critical | | Author: | Wolfgang Hotwagner AIT Austrian Institute of Technology | SUMMARY...
[SECURITY] Fedora 33 Update: python-django-3.0.13-1.fc33
Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...
Security Update for Microsoft Visual Studio Code Quantum Development Kit Extension (March 2021)
Microsoft Quantum Development Kit for Visual Studio Code could allow a remote attacker to execute arbitrary code on the system. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system with privileges of the...
