9 matches found
CVE-2022-24843
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1. There are no known workarounds for th...
CVE-2022-24843: Improper Limitation of a Pathname to a Restricted Directory
Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1. There are no known workarounds for th...
PT-2022-16917
Name of the Vulnerable Software and Affected Versions Gin-vue-admin versions 2.50 Description Gin-vue-admin is a backstage management system based on vue and gin. The issue arises due to a lack of parameter validation, leading to an arbitrary file read vulnerability. There are no known workaround...
CVE-2021-29431
Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perfor...
CVE-2017-17313: Improper Restriction of Operations within the Bounds of a Memory Buffer
The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the la...
CVE-2017-15325: Integer Overflow or Wraparound
The Bdat driver of Prague smart phones with software versions earlier than Prague-AL00AC00B211, versions earlier than Prague-AL00BC00B211, versions earlier than Prague-AL00CC00B211, versions earlier than Prague-TL00AC01B211, versions earlier than Prague-TL10AC01B211 has integer overflow...
PT-2018-6409
Name of the Vulnerable Software and Affected Versions: Huawei Enjoy 5s versions prior to TAG-AL00C92B170 Huawei Y6 Pro versions prior to TIT-L01C576B121 Description: The issue is caused by a lack of parameter validation, leading to an information leak. An attacker can trick a user into installing...
CVE-2017-8170: Improper Restriction of Operations within the Bounds of a Memory Buffer
Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone,...
CVE-2017-8211: Improper Restriction of Operations within the Bounds of a Memory Buffer
The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...