7130 matches found
Google Chrome Cache Code Execution
The vulnerability of the Google Chrome browser’s cache component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2022-7043
Name of the Vulnerable Software and Affected Versions The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordPress plugin versions prior to 2.0.4 Description The issue is related to a reflected XSS vulnerability on the my-sticky-elements-leads admin page. This vulnerabilit...
SIEM EventLog Analyzer Command Injection
The vulnerability of the SIEM EventLog Analyzer software exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on the target system remotely...
CVE-2021-44676
Zoho ManageEngine Access Manager Plus before 4203 allows anyone to view a few data elements e.g., access control details and modify a few aspects of the application state...
Cisco Application Policy Infrastructure Controller Command Execution
The vulnerability of the Cisco Application Policy Infrastructure Controller’s web interface and API exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...
emlog Remote Code Execution Vulnerability (CNVD-2021-101689)
Emlog is a PHP and MySQL-based CMS builder from the Emlog personal developer. Emlog in version 5.3.1 contains a remote code execution vulnerability that stems from the failure of a network system or product to properly filter special elements in the process of constructing code segments from...
Google Chrome Disclosure
The vulnerability in the browser text input implementation of Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
Cisco NX-OS Arbitrary Command Execution
The vulnerability of the Cisco NX-OS operating system for Cisco Nexus 9000 Series switches exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability can allow attackers to increase their privileges...
CVE-2021-3817
wbcecms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...
CVE-2021-3817 SQL Injection in wbce/wbce_cms
wbcecms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command...
Adobe Premiere Elements NULL Pointer Overflow DoS
The vulnerability of Adobe Premiere Elements software-related video editing programs is related to the handling of the NULL pointer. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Adobe Photoshop Elements Buffer Overflow
The vulnerability of Adobe Photoshop Elements relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...
CVE-2021-43469: Improper Neutralization of Special Elements used in a Command
VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component...
getprofile.sh Arbitrary Command Execution
The vulnerability of the getprofile.sh script, a monitoring tool for Nagios XI, is related to the failure to take measures to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
mbConnect24serv Code Execution
The vulnerability of the mbConnect24serv component for clients to establish encrypted connections with mbDIALUP is related to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability can allow an attacker to enhance their...
kubectl Privilege Escalation
The vulnerability of the Kubernetes command-line tool kubectl relates to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Cross-fading any two DOM elements is currently impossible
Update: A spec change has landed to make this possible, it'll ship in Chrome 100, it's been implemented in Firefox, and it already existed as a non-standard feature in Safari. Soon this feature will be supported across all major browsers! Ok, it isn't always impossible. Be amazed as I cross-fade...
IBM Data Risk Manager Arbitrary Command Execution
The vulnerability of the IBM Data Risk Manager application for identifying, analyzing, and visualizing business risks is related to the failure to take measures to neutralize specific elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute arbitrar...
CVE-2021-43362
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MedData HBYS allows SQL Injection.This issue affects HBYS: from unspecified before 1.1...
