Sympa Security Vulnerabilities

Sympa is an open source email management list software from the Sympa community. The software supports email management, authentication and access control. A security vulnerability exists in versions prior to Sympa 6.2.62, which stems from improper use of the cookie parameter, resulting in a...

OTCMS 代码问题漏洞

OTCMS Nettie CMS is an article-based web content management system CMS. A code issue vulnerability exists in OTCMS versions prior to 6.62, which stems from a server-side request forgery due to misuse of the signalUrl parameter...

OTCMS 安全漏洞

OTCMS Nettie CMS is a content management system CMS for article-based websites. A security vulnerability exists in OTCMS versions prior to 6.62, which stems from path traversal due to misuse of the parameter file...

AC Repair and Services System SQL注入漏洞

AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in AC Repair and Services System version 1.0, which stems from a misuse of the parameter id resulting in sql injection...

SUL1SS shop SQL注入漏洞

SUL1SS shop is a multi-merchant mall application from the SUL1SS individual developer. SUL1SS shop suffers from a SQL injection vulnerability that stems from a misuse of the keyword parameter resulting in sql injection...

AdminServ 跨站脚本漏洞

AdminServ is a WebInterface used by Christopher F., an individual developer, to manage Trackmania Forever and ManiaPlanet dedicated servers. A cross-site scripting vulnerability exists in AdminServ that stems from cross-site scripting due to misuse of the parameter error...

CVE-2022-31468

OX App Suite through 8.2 allows XSS via an attachment or OX Drive content when a client uses the len or off parameter...

SQL Injection

pimcore/pimcore is vulnerable to SQL injection. Direct use of property parameter without secure handling allows an attacker to inject malicious SQL script via the parameter to steal the data...

CVE-2019-11426

An XSS issue was discovered in app/admincp/template/admincp.header.php in idreamsoft iCMS 7.0.14 via the admincp.php?app=config tab parameter...

Code injection

The etmsetupaux function in drivers/hwtracing/coresight/coresight-etm-perf.c in the Linux kernel before 4.10.2 allows attackers to cause a denial of service panic because a parameter is incorrectly used as a local variable...

UBUNTU-CVE-2018-11232

The etmsetupaux function in drivers/hwtracing/coresight/coresight-etm-perf.c in the Linux kernel before 4.10.2 allows attackers to cause a denial of service panic because a parameter is incorrectly used as a local variable...

CVE-2018-11232

The etmsetupaux function in drivers/hwtracing/coresight/coresight-etm-perf.c in the Linux kernel before 4.10.2 allows attackers to cause a denial of service panic because a parameter is incorrectly used as a local variable...

CVE-2018-11232

The etmsetupaux function in drivers/hwtracing/coresight/coresight-etm-perf.c in the Linux kernel before 4.10.2 allows attackers to cause a denial of service panic because a parameter is incorrectly used as a local variable...

Unspecified Vulnerability in Google Android Media framework (libavc)

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with the Media framework libavc as a framework for multimedia development. is a framework used for multimedia...

The vulnerability of the Windows operating system, which allows a hacker to inject arbitrary web or HTML code

The vulnerability of the Active Directory service for Windows operating systems exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code by manipulating the wct parameter...