10961 matches found
SUSE SLES15: freeradius-server / freeradius-server-devel / etc (SUSE-SU-2021:2147-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2021:2147-1 advisory. - Fixed plaintext password entries in logfiles bsc1184016. Tenable has extracted the preceding description block directly from the SUSE security...
Exploit for Unrestricted Upload of File with Dangerous Type in Seeddms
CVE-2019-12744 Information Exploit Title: Remote Command...
Command Execution Vulnerability in Guojiz International Web Site Navigation System (CNVD-2021-46694)
Guojiz International Website Navigation System is developed with ThinkPHP5.0 PHP7.0 Mysql Apache/Nginx/iis, a CMS program suitable for small and medium-sized webmasters to build websites. Guojiz International Website Navigation System has a command execution vulnerability that can be exploited by...
SQL injection vulnerability in Guojiz international web site navigation system (CNVD-2021-46693)
Guojiz International Website Navigation System is developed with ThinkPHP5.0 PHP7.0 Mysql Apache/Nginx/iis, a CMS program suitable for small and medium-sized webmasters to build websites. Guojiz International Website Navigation System has a SQL injection vulnerability, which can be exploited by...
Medium: 389-ds-base
Issue Overview: When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of an entry in the LDAP database. CVE-2020-35518 Affected Packages: 389-ds-base Note:...
07FLY-CRM Customer Management System v1.2 suffers from SQL Injection Vulnerability
Zero take-off CRM management system 07FLY-CRM, based on the GPLv3 agreement issued for small and medium-sized management activities , currently provides customer relationship management CRM, sales and marketing inventory JXC, open source software free of charge , in order to create China's first...
SQL Injection Vulnerability in 07FLY-CRM
07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM SQL injection vulnerability , an attacker can use this vulnerability to obtain sensitive information in the databa...
07FLY-CRM suffers from SQL injection vulnerability (CNVD-2021-46255)
07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM SQL injection vulnerability , an attacker can use this vulnerability to obtain sensitive information in the databa...
07FLY-CRM suffers from SQL injection vulnerability (CNVD-2021-46253)
07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM SQL injection vulnerability , an attacker can use this vulnerability to obtain sensitive information in the databa...
07FLY-CRM has a flawed logic vulnerability
07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...
07FLY-CRM Customer Management System suffers from SQL Injection Vulnerability
Zero take-off CRM management system 07FLY-CRM, based on the GPLv3 protocol release, for small and medium-sized enterprise management activities, currently provides customer relationship management CRM, sales and purchase inventory JXC and so on. A SQL injection vulnerability exists in the 07FLY-C...
CVE-2021-27388
SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modifications and/or execution of limited control...
Design/Logic Flaw
SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modifications and/or execution of limited control...
CVE-2021-27388
The CVE-2021-27388 entry affects Siemens SINAMICS medium voltage remote-access products (SINAMICS SL150, SM150, SM150i). A vulnerability in the Sm@rtServer component allows unauthenticated remote access that can cause a denial-of-service and may enable limited configuration modifications or execu...
CVE-2021-27388
SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modifications and/or execution of limited control...
SUSE SLES11 Security Update : MozillaFirefox, mozilla-nss, mozilla-nspr (SUSE-SU-2019:14114-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2019:14114-1 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C...
Intel SPS Advisory - Lenovo Support US
No description provided...
Speculative Code Store Bypass (SCSB) and Floating-Point Value Injection (FPVI) Advisory - Lenovo Support US
No description provided...