4249 matches found
Command Execution Vulnerability in EG2000UE of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-18958)
EG2000UE is a gateway product. A command execution vulnerability exists in the EG2000UE of Beijing StarNet Ruijie Network Technology Company Limited, which can be exploited by an attacker to execute arbitrary commands...
Command Execution Vulnerability in Electronic Document Security Management System of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-17841)
Electronic document security management system is an electronic document security protection software, the system utilizes the driver layer transparent encryption technology, through the encryption protection of electronic documents, to prevent internal staff leakage and external personnel to...
CVE-2024-26503
Unrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code via upload of crafted file to certbadge.php endpoint...
CVE-2024-28424
zenml v0.55.4 was discovered to contain an arbitrary file upload vulnerability in the load function at /materializers/cloudpicklematerializer.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted file...
Description of the security update for SharePoint Enterprise Server 2016: March 12, 2024 (KB5002559)
None None...
Faronics Deep Freeze Code Issue Vulnerability
Faronics Deep Freeze is a system recovery software developed by Faronics, Inc. A code issue vulnerability exists in Faronics Deep Freeze version 8.30.020.4627 and prior versions, which originates from a malicious code execution that can be performed by renaming a malicious executable file to...
Command Execution Vulnerability in EG3000SE of Beijing StarNet Ruijie Network Technology Co.
EG3000SE is a new generation of high performance integrated gateway. A command execution vulnerability exists in the EG3000SE of Beijing StarNet Ruijie Network Technology Co. Ltd, which can be exploited by an attacker to gain control of the server...
KB5035858: Windows 10 LTS 1507 Security Update (March 2024)
The remote Windows host is missing security update 5035858. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2024-21441, CVE-2024-21444, CVE-2024-21450, CVE-2024-26161, CVE-2024-26166 - Windows USB Hub...
Important: Red Hat Security Advisory: postgresql security update
An update for postgresql is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
Command Execution Vulnerability in the Client of KingSuperSCADA Operation System of Beijing Asian Control Technology Development Co.
Ltd. is a high-tech industrial automation and informatization software platform enterprise founded in 1997. A command execution vulnerability exists in the client side of the KingSuperSCADA operating system of Beijing Asian Control Technology Development Co...
Important: Red Hat Security Advisory: postgresql:12 security update
An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.4 Advanced Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...
BIT-GHOST-2022-27139
An arbitrary file upload vulnerability in the file upload module of Ghost v4.39.0 allows attackers to execute arbitrary code via a crafted SVG file. NOTE: Vendor states that as outlined in Ghost's security documentation, upload of SVGs is only possible by trusted authenticated users. The uploadin...
Command Execution Vulnerability in RG-UAC 6000-E50C at Beijing StarNet Ruijie Network Technology Co.
Ruijie Networks, founded in 2003, is an industry-leading provider of network infrastructure and solutions. A command execution vulnerability exists in the RG-UAC 6000-E50C of Beijing StarNet Ruijie Network Technology Company Limited, which can be exploited by an attacker to execute arbitrary...
Command Execution Vulnerability in Electronic Document Security Management System of Beijing Yisaitong Technology Development Co.
Electronic document security management system is an electronic document security protection software, the system utilizes the driver layer transparent encryption technology, through the encryption protection of electronic documents, to prevent internal staff leakage and external personnel to...
Siemens Simcenter Femap Out-of-Bounds Write Vulnerability (CNVD-2024-09330)
Simcenter Femap is an advanced simulation application for creating, editing and checking finite element models of complex products or systems. An out-of-bounds write vulnerability exists in Siemens Simcenter Femap, which can be exploited by an attacker to execute code in the context of the curren...
Siemens Simcenter Femap Out-of-Bounds Write Vulnerability (CNVD-2024-09334)
Simcenter Femap is an advanced simulation application for creating, editing and checking finite element models of complex products or systems. An out-of-bounds write vulnerability exists in Siemens Simcenter Femap, which can be exploited by an attacker to execute code in the context of the curren...
Siemens Simcenter Femap Out-of-Bounds Read Vulnerability (CNVD-2024-09331)
Simcenter Femap is an advanced simulation application for creating, editing and checking finite element models of complex products or systems. An out-of-bounds read vulnerability exists in Siemens Simcenter Femap, which can be exploited by an attacker to execute code in the context of the current...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A code execution vulnerability exists in Mozilla Firefox, which can be exploited by attackers to execute arbitrary code or cause a denial of service on a vulnerable system using unknown attack vectors...
CVE-2023-40057 SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution
The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution...
