PT-2025-7981

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the tcmu try get data page function does not properly take a reference count on pages under cmdr lock, potentially leading to a page...

BMC Community Track-It! 授权问题漏洞

BMC Community Track-It! is an It helpdesk software from BMC Community USA. It is used for help desks and helpdesks with asset management. An authorization issue vulnerability exists in BMC Community Track-It! that originates in the GetData endpoint. The issue is caused due to a lack of...

PT-2021-27882

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read error. Technical details include the crash type and state, which involve functions such as exif data lo...

CVE-2021-40493

Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFailureReason API...

Dell Hybrid Client 信息泄露漏洞

DELL Dell Hybrid Client is a software application from Dell USA Inc. It provides a client computing software with hybrid cloud management capabilities. An information disclosure vulnerability exists in Dell Hybrid Client versions prior to 1.5, which can be exploited by attackers to obtain sensiti...

CVE-2021-30199

In filters/reframelatm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gffilterpckgetdata is called. The first arg pck may be null with a crafted mp4 file,which results in a crash...

PT-2021-18661

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to a Null Pointer Dereference in the gf filter pck get data function, which can be triggered by a crafted mp4 file. This results in a crash when the first argument pck is null. Recommendation...

PT-2020-6940 · Gnu +2 · Gnu Nm +2

Name of the Vulnerable Software and Affected Versions: GNU nm versions prior to 2.34 Description: The issue is related to a memory consumption problem in the get data function in binutils/nm.c. This allows attackers to cause a denial of service via crafted commands. The vulnerability is associate...

PT-2020-21655

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: exif mnote data olympus load, exif data load data, and ex...

Linux kernel denial of service vulnerability (CNVD-2018-10154)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'getdatablock' function in the fs/f2fs/data.c file in Linux kernel versions prior to 4.11. A local attacker could exploit this...

PT-2018-9670

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions through 2.2.6 Description: The issue allows PHP object injection due to an unserialize call in the get data function of libclassesinternalclass.LoginOperations.php. A remote attacker can upload and execute code or...

Design/Logic Flaw

Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked e.g., a /var/www pathname typically means Linux or UNIX...

CVE-2017-15937

Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked e.g., a /var/www pathname typically means Linux or UNIX...

PT-2017-14296

Name of the Vulnerable Software and Affected Versions Artica Pandora FMS version 7.0 Description The issue allows the leakage of a full installation pathname through GET data when the main page's graph requisition is intercepted. This also results in the disclosure of general OS information, as...

CVE-2017-15937: Exposure of Sensitive Information to an Unauthorized Actor

Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition. This also implies that general OS information is leaked e.g., a /var/www pathname typically means Linux or UNIX...

Sierra Wireless GX440 weak password storage vulnerability (CNVD-2017-10185)

The Sierra Wireless GX440 is a gateway device from Sierra Wireless Canada. The Sierra Wireless GX440 suffers from a weak password storage vulnerability that can be exploited by a remote attacker to submit a special request and obtain sensitive information...

PT-2016-6609

Name of the Vulnerable Software and Affected Versions CPython versions prior to 2.7.12 CPython versions 3.x prior to 3.4.5 CPython versions 3.5.x prior to 3.5.2 Description The issue is related to an integer overflow in the get data function, which can be triggered by a negative data size value...

vBulletin 4.x Verify Email Before Registration Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: vBulletin Verify Email Before Registration Plugin - SQL Injection Date: September 19 2014 Version: Any vBulletin 4.. version which has the plugin installed. Plugin: http://www.vbulletin.org/forum/showthread.php?t=294164 Author: Dave FW/...

PT-2014-6293 · Cairo +1 · Cairo +1

Name of the Vulnerable Software and Affected Versions: Cairo version 1.10.2 Description: The issue allows context-dependent attackers to cause a denial of service, specifically a NULL pointer dereference, via a large string. This is related to the cairo image surface get data function...

CVE-2013-1636

Cross-site scripting XSS vulnerability in open-flash-chart.swf in Open Flash Chart aka Open-Flash Chart, as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews comjnews component 8.0.1 for Joomla!, and CiviCRM 3.1.0 through 4.2.9 and 4.3.0 through 4.3.3, allows remote attackers ...