Ivanti Avalanche 安全漏洞

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche prior to version 6.4.3, which stems from a use-after-release...

CVE-2024-32409

An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script...

CVE-2023-49502

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ffbwdiffilterintrac function in the libavfilter/bwdifdsp.c:125:5 component...

CVE-2023-50009

FFmpeg v.n6.1-3-g466799d4f5 is vulnerable to a heap-based buffer overflow within the ff_gaussian_blur_8 function located in the libavfilter/edge_template.c:116:5 component. The flaw is specifically related to the "cull" function. A local attacker can exploit this vulnerability to execute arbitrar...

CVE-2023-49502

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ffbwdiffilterintrac function in the libavfilter/bwdifdsp.c:125:5 component...

CVE-2024-30927

Cross Site Scripting vulnerability in DerbyNet v9.0 and below allows attackers to execute arbitrary code via the racer-results.php component...

CVE-2024-30922

SQL Injection vulnerability in DerbyNet v9.0 allows a remote attacker to execute arbitrary code via the where Clause in Award Document Rendering...

ROS-20240418-08

A vulnerability in the Browserify-sign cryptographic functionality duplication package is related to the upper bound check in the dsaVerify function. Exploitation of the vulnerability could allow an attacker, acting remotely, to create signatures that can be successfully verified by any public ke...

CVE-2024-31784

An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the src component...

CVE-2024-31680

The Shibang Communications Co., Ltd. IP network intercom broadcasting system v.1.0 is vulnerable to a File Upload flaw in the my_parser.php component. This vulnerability allows a local attacker to execute arbitrary code on the system. To mitigate this risk, it is recommended to disable the my_par...

CVE-2024-31784

An issue in Typora v.1.8.10 and before, allows a local attacker to obtain sensitive information and execute arbitrary code via a crafted payload to the src component...

Typora 安全漏洞

Typora is an editor. A security vulnerability exists in Typora v.1.8.10 and earlier versions that originated from a vulnerability that allows a local attacker to obtain sensitive information and execute arbitrary code via a crafted src component payload...

CVE-2020-22539

An arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-28558

SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin/app/webcrud.php...

CVE-2024-28556

SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php...

CVE-2024-26023

An OS command injection vulnerability (CWE-78) exists in BUFFALO wireless LAN routers , allowing a logged-in user to execute arbitrary OS commands. Affected models and versions include WCR-1166DS (Ver. 1.32 and earlier), WSR-1166DHP (Ver. 1.14 and earlier), WSR-1166DHP2 (Ver. 1.14 and earlier), W...

CVE-2020-22539

An arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2020-22539

Codoforum v4.9 is vulnerable to an arbitrary file upload vulnerability within the Add Category function. This flaw allows an attacker to execute arbitrary code by uploading a specially crafted file. To mitigate the risk, it is recommended to disable the Add Category function until a formal patch ...

CVE-2024-28718

An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the certmanager.py. component...

QEMU Resource Management Error Vulnerability (CNVD-2024-20282)

QEMU Quick Emulator is a set of simulation processor software. The software is fast and cross-platform. A resource management error vulnerability exists in QEMU virtio, which stems from a double-release vulnerability in virtio-gpu, virtio-serial-bus, and virtio-crypto, with an insufficient...