Lucene search
+L

4224 matches found

CNNVD
CNNVD
added 2021/03/22 12:0 a.m.6 views

XStream 代码问题漏洞

XStream is a simple Java-based library , Java objects serialized to xml and vice versa i.e. : Java objects and xml documents can be easily converted to each other . A code execution vulnerability exists in XStream, which can be exploited by an attacker to manipulate the processed input stream and...

9.8CVSS8.5AI score0.7598EPSS
SaveExploits1References48
CNVD
CNVD
added 2021/03/22 12:0 a.m.5 views

Code execution vulnerability in geeweb

geeweb is a PHP MySQL-based development to completely free, fast site, easy maintenance, high security, strong load force, SEO friendly and other features, for the small and medium-sized enterprises, social groups, schools and individual users, such as the station-building system. A code executio...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2021/03/21 12:0 a.m.3 views

Command Execution Vulnerability in the WEB Management System of Riptide RSR Routers

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A command execution vulnerability exists in the WEB management system of Ruijie RSR routers. An attacker can exploit this...

7.2AI score
SaveExploits0
OSV
OSV
added 2021/03/19 11:12 a.m.7 views

OPENSUSE-SU-2021:0447-1 Security update for velocity

This update for velocity fixes the following issues: - CVE-2020-13936: Fixed an arbitrary code execution when attacker is able to modify templates bsc1183360. This update was imported from the SUSE:SLE-15-SP2:Update update project...

9CVSS8.9AI score0.22709EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/03/19 12:0 a.m.4 views

Command Execution Vulnerability in Access Office Anywhere 2015

Tongda OA Office Anywhere is a simple and practical collaborative office OA system. A command execution vulnerability exists in Tongda Office Anywhere 2015, which can be exploited by an attacker to gain control of the server...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/03/19 12:0 a.m.4 views

Command Execution Vulnerability in Access Office Anywhere 2013

Tongda OA Office Anywhere is a simple and practical collaborative office OA system. A command execution vulnerability exists in Access Office Anywhere 2013, which can be exploited by an attacker to gain control of the server...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/03/16 12:0 a.m.10 views

Command Execution Vulnerability in PHPWind

PHPWind is an open source community program based on PHP and MySQL. PHPWind suffers from a command execution vulnerability. An attacker can exploit this vulnerability to gain server privileges...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/03/15 12:0 a.m.5 views

Command Execution Vulnerability in MCMS

MCMS is a development template based on SpringBoot 2 architecture , front-end based on vue, element ui . MCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the web server...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/03/15 12:0 a.m.8 views

Command Execution Vulnerability in OneThink

OneThink is an open source content management framework. OneThink suffers from a command execution vulnerability that can be exploited by an attacker to gain control of a web server...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/03/15 12:0 a.m.7 views

Command execution vulnerability exists in OneThink (CNVD-2021-22773)

OneThink is an open source content management framework. OneThink suffers from a command execution vulnerability that can be exploited by an attacker to gain control of a web server...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/03/15 12:0 a.m.5 views

Command Execution Vulnerability in EG Easy Gateway WEB Management System of Ruijie Networks Co.

Ruijie EasyGate is a multi-service integrated gateway product launched by Ruijie Networks to solve the current network egress problems. A command execution vulnerability exists in the EG EasyGate WEB management system of Ruijie Networks Corporation, which can be exploited by an attacker to gain...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/03/15 12:0 a.m.6 views

Command Execution Vulnerability in Shanghai Atech Technology Co., Ltd.'s Aggressive 750W (CNVD-2021-22732)

The Aggressive 750W is an enterprise-grade wireless router. Ltd. Aggressive 750W suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/03/15 12:0 a.m.6 views

Command Execution Vulnerability in 11AC 1200MBPS Wireless Panel AP of Shenzhen Jixiang Tengda Technology Co.

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd. 11AC 1200MBPS Wireless Panel AP has a command execution vulnerability that can be...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/03/14 12:0 a.m.3 views

Command Execution Vulnerability in DIR-816 750M11AC Wireless Router

DIR-816 750M11AC Wireless Router is a wireless router from AUO Electronic Devices Shanghai Co. A command execution vulnerability exists in the DIR-816 750M11AC Wireless Router, which can be exploited by an attacker to remotely execute commands...

7.3AI score
SaveExploits0
OSV
OSV
added 2021/03/11 12:15 a.m.14 views

CVE-2021-28134

Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API...

9.8CVSS7.1AI score
SaveExploits0References4
CNVD
CNVD
added 2021/03/11 12:0 a.m.5 views

Command Execution Vulnerability in Chase T Series Ledger System

Ltd. is a member company of UFIDA. Changjitong is committed to providing social, personalized, service-oriented and small business management support for small and medium-sized enterprises. A command execution vulnerability exists in the Changjitong T-Series Ledger System. An attacker can exploit...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2021/03/10 12:0 a.m.4 views

Command Execution Vulnerability in Night God Emulator

Night God Android Emulator Night God Emulator, is a new generation of Android emulator. A command execution vulnerability exists in Night God Emulator, which can be exploited by an attacker to gain control of the server...

7.5AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/03/09 8:0 a.m.54 views

Description of the security update for Office 2013: March 9, 2021 (KB4493203)

Description of the security update for Office 2013: March 9, 2021 KB4493203 Summary This security update resolves Microsoft Excel Remote Code Execution Vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common Vulnerabilities and Exposures...

7.8CVSS8AI score0.03122EPSS
SaveExploits0
CNVD
CNVD
added 2021/03/09 12:0 a.m.10 views

IBM DataPower Gateway Server-Side Request Forgery Vulnerability

IBM DataPower Gateway is a security and integration platform built specifically for mobile, cloud, API, web, SOA, B2B and cloud workloads. A server-side request forgery vulnerability exists in IBM DataPower Gateway 10.0.0.0-10.0.1.1, 2018.4.1.0-2018.4.1.14. A local attacker with administrative...

6.7CVSS7.4AI score0.00868EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/03/08 12:0 a.m.2 views

Command Execution Vulnerability in KiteCMS

KiteCMS open source web content management system CMS, the system is based on the framework ThinkPHP 5.1. version of the development, applicable to individuals and enterprises to quickly build a station and development needs. KiteCMS command execution vulnerability , an attacker can exploit the...

7.2AI score
SaveExploits0
Rows per page
Query Builder