2914 matches found
CVE-2018-17374
CVE-2018-17374 describes a SQL Injection in the Joomla! Auction Factory 4.5.5 component exposed through the filter_order_Dir or filter_order parameters. The vulnerability stems from unsafe handling of externally entered SQL statements in this component. According to the linked records, the CVE ha...
CVE-2018-17381
SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filterorderDir or filterorder parameter...
CVE-2018-17381
The CVE-2018-17381 vulnerability affects the Joomla! Dutch Auction Factory 2.0.2 component. A SQL Injection exists via the filter_order_Dir or filter_order parameter due to insufficient validation of externally supplied SQL statements in the database layer, enabling potentially unauthorized queri...
CVE-2018-17386
SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATHINFO to mydeals/ or listdeals/...
CVE-2018-17386
CVE-2018-17386 : The Joomla! Micro Deal Factory 2.4.0 component contains a SQL injection vulnerability via the id parameter or PATH_INFO routes (mydeals/ or listdeals/). Attackers could potentially execute arbitrary SQL commands against the underlying database. The description is consistently rep...
CVE-2018-18472
Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...
Design/Logic Flaw
Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...
CVE-2018-18472
Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...
CVE-2018-18472
Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...
SQL Injection Vulnerability in SIGER Digital Factory System
SIGER Digital Factory System is an equipment maintenance management software created by Jiangsu SIGER Data Technology Co., Ltd. for the equipment management of industrial manufacturing enterprises. SIGER Digital Factory System suffers from a SQL injection vulnerability, which can be exploited by...
CVE-2019-5283
There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...
CVE-2019-5283
There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...
CVE-2019-5297
Emily-L29C Huawei phones versions earlier than 9.0.0.159 C185E2R1P12T8 have a Factory Reset Protection FRP bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obta...
Design/Logic Flaw
There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...
CVE-2019-5297
Emily-L29C Huawei phones versions earlier than 9.0.0.159 C185E2R1P12T8 have a Factory Reset Protection FRP bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obta...
CVE-2019-5283
There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...
Design/Logic Flaw
There is a Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, t...
CVE-2019-5306
There is a Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, t...
CVE-2019-5297
Emily-L29C Huawei phones versions earlier than 9.0.0.159 C185E2R1P12T8 have a Factory Reset Protection FRP bypass security vulnerability. Before the FRP account is verified and activated during the reset process, the attacker can perform some special operations to bypass the FRP function and obta...
CVE-2019-5306
There is a Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167C00E81R1P21T8. When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, t...