The vulnerability of the graphical interface (GDM/GNOME3) of the ROSA KOBALT operating system, which allows a perpetrator to increase their privileges

The vulnerability of the graphical interface GDM/GNOME3 of the ROSA KOBALT operating system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...

Centreon 操作系统命令注入漏洞

Centreon, a free and open source IT and application monitoring software, is vulnerable to an OS command injection vulnerability in /graphStatus/displayServiceStatus.php in Centreon version 19.10.8. A remote attacker can exploit this vulnerability to execute arbitrary OS commands via shell...

4images 1.8 SQL Injection

Exploit Title: 4images 1.8 - 'limitnumber' SQL Injection Authenticated Exploit Author: Andrey Stoykov Software Link: https://www.4homepages.de/download-4images Version: 1.8 Tested on: Linux Source Analysis: Line 658 - User action defined if $action == "findimages" Line 661 - Vulnerable condition...

The vulnerability of the manager for Cockpit servers, related to errors in displaying the user interface or frames, allows a perpetrator to inject malicious code.

The vulnerability of the Cockpit server administrator relates to errors in displaying the user interface or frames. Exploiting this vulnerability allows a malicious actor to inject malicious code remotely...

NVIDIA GPU Display Drivers - July 2021 - Lenovo Support US

No description provided...

PT-2021-3919 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to errors in displaying information to the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. This allows...

MetInfo Cross-Site Request Forgery Vulnerability (CNVD-2022-05449)

MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. Metinfo 6.1.3 version of the existence of cross-site request forgery...

NVIDIA® GPU display driver July 2021 security update

NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver which may allow arbitrary code execution, denial of service, and information disclosure. NVIDIA has released updates to mitigate the potential vulnerabilities. HP has identified affected...

NVIDIA Linux GPU Display Driver (July 2021)

The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for control calls where the...

RPCMS 跨站脚本漏洞

RPCMS is a software application, a web CMS system. RPCMS suffers from a cross-site scripting vulnerability that stems from a failure to properly clean up the nickname variable before it is displayed on a page in RPCMS v1.8 versions and below. With the API functionality turned on, an attacker can...

CVE-2021-37463

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name stored...

CVE-2021-37463

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name stored...

CVE-2021-37463

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name stored...

Cross site scripting

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name stored...

CVE-2021-37463

CVE-2021-37463 affects NCH Quorum v2.03 and earlier, with a stored XSS in the User Display Name. The root cause is a script injection that is stored and rendered in the user display context. Impact stated in CNVD/CNNVD references describes attackers potentially stealing cookie‑based authenticatio...

CVE-2021-37463

In NCH Quorum v2.03 and earlier, XSS exists via User Display Name stored...

CVE-2020-20741

Beckhoff CX9020 vulnerability (firmware CX9020_CB3011_WEC7_HPS_v602_TC31_B4016.6) enables authentication bypass via the CE Remote Display Tool because the Windows CE side does not close the incoming connection after incorrect credentials. This is a remote, network-exposed issue with potential for...

Beckhoff Automation GmbH & Co. KG CX9020 安全漏洞

The Beckhoff Automation GmbH & Co. KG CX9020 is a compact DIN rail-mounted Ethernet control system with a 1 GHz ARM Cortex™-A8 CPU from Beckhoff, Germany. A security vulnerability exists in the Beckhoff Automation GmbH & Co. KG CX9020 that stems from incorrect access control. The vulnerability...

CVE-2021-20430

IBM i2 Analyst's Notebook Premium IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196341...

CVE-2021-1095

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handlers for all control calls with embedded parameters where dereferencing an untrusted pointer may lead to denial of service...