SQL Injection Vulnerability in Xinkao Online Marking System of Hebei Xinkao Education Technology Co.

Hebei Xinkao Education Technology Co., Ltd. is a professional high-tech enterprise dedicated to the informatization of educational applications, and has developed the Campus Card Management System, Xinkao Online Marking System and Home-School Interconnection System. Hebei Xinkao Education...

Telos Automated Message Handling System contains multiple vulnerabilities

Overview Telos Automated Message Handling System AMHS contains multiple XSS vulnerabilities and a database information disclosure vulnerability. Description Telos AMHS is a web-based messaging system that supports DoD and Intelligence Community IC security marking requirements. AMHS versions prio...

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2020-01295)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

SQL Injection Vulnerability in the Frontend of Xinxiao Online Marking System

Xinkao Online Marking System is an online marking system for the majority of teachers and friends. Xinkao Online Marking System has a SQL injection vulnerability in the foreground, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in the Login Page of Xinxiao Online Marking System

Hebei Xinkao Education Technology Co., Ltd. is a company that focuses on the research, development and operation of education informatization data platform. SQL injection vulnerability exists in the login page of Xinkao online marking system, which can be exploited by attackers to obtain sensitiv...

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2020-02215)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2020-02207)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

SQL Injection Vulnerability in Pinnacle Online Marking System

Pinke online marking system is the objective questions automatically identified, subjective questions by the teacher in front of the computer marking, and ultimately by the computer will be subjective and objective questions results summarized to generate the school's required statistical analysi...

SQL Injection Vulnerability in Xincao Online Marking System

Xinkao Online Marking System is an online marking system for the majority of teachers and friends. SQL injection vulnerability exists in Xinkao Online Marking System. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2019-46625)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

SQL Injection Vulnerability in Dingjia Online Marking System

Yunnan Suisheng Technology Co., Ltd. is a company that deals with the development and application of computer hardware and software. A SQL injection vulnerability exists in Dingjia Online Marking System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Nanhao Online Marking System te***.jsp Page

Nanhao online marking system is an online marking system developed by Beijing Yunyi You Technology Co. There is a SQL injection vulnerability in the te.jsp page of Nanhao Online Marking System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Jinhang Online Marking System

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

poppler: stack consumption in function Dict::find() in Dict.cc

PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find located at Dict.cc, which can for example be triggered by passing a crafted pdf file to the pdfunite binary...

Limesurvey User Notification Flagging Vulnerability

limesurvey is an open source online questionnaire program with multiple functions such as questionnaire design, modification, release, recovery and statistics. A user notification marking vulnerability exists in Limesurvey versions prior to 3.17.14. An attacker can use this vulnerability to mark...

CVE-2019-16181

In Limesurvey before 3.17.14, admin users can mark other users' notifications as read...

Libav Buffer Overflow Vulnerability

Libav is Libav team's set of cross-platform audio and video can be recorded, converted solution, which includes a libavcodec encoder. A buffer overflow vulnerability exists in the 'ffh264executerefpicmarking' function of libavcodec in Libav version 9.21. The vulnerability stems from a networked...

OPENSUSE-SU-2019:0087-1 Security update for zeromq

This update for zeromq fixes the following issues: Security issue fixed: - CVE-2019-6250: fix a remote execution vulnerability due to pointer arithmetic overflow bsc1121717 The following tracked packaging change is included: - boo1082318: correctly mark license files as licence instead of...

CVE-2019-9903

PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find located at Dict.cc, which can for example be triggered by passing a crafted pdf file to the pdfunite binary...

CVE-2019-9903

PDFDoc::markObject in PDFDoc.cc in Poppler 0.74.0 mishandles dict marking, leading to stack consumption in the function Dict::find located at Dict.cc, which can for example be triggered by passing a crafted pdf file to the pdfunite binary...