Synology Presto File Server 路径遍历漏洞

Synology Presto File Server is a high-speed file transfer suite from China-based Synology Inc. A path traversal vulnerability exists in Synology Presto File Server versions prior to 2.1.2-1601, which stems from improperly restricting pathnames of restricted directories in the File Operations...

ZZCMS Admin SQL Injection

The vulnerability of the admin/ask.php implementation in the ZZCMS CMS system relates to the lack of measures taken to protect the SQL query structure during the processing of the askbigclassid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

RHEL 8 : Red Hat Virtualization (RHSA-2022:6551)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6551 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host,...

CentOS: Security Advisory for rsync (CESA-2022:6170)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CentOS 7 : rsync (RHSA-2022:6170)

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2022:6170 advisory. - An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The...

RHEL 8 : rsync (RHSA-2022:6173)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:6173 advisory. The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only...

Important: Red Hat Security Advisory: rsync security update

An update for rsync is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: rsync security update

An update for rsync is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Important: Red Hat Security Advisory: rsync security update

An update for rsync is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Remote code execution

In Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary loca...

Cisco IOS Software Loader Code Execution

The vulnerability of the Cisco IOS operating system’s microprogramming software for Cisco Catalyst Digital Building switches is related to security flaws. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Ubuntu 16.04 ESM : ncurses vulnerabilities (USN-5448-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5448-1 advisory. It was discovered that ncurses was not properly checking array bounds when executing the fmtentry function, which could result in an out-of-bounds write...

Cluster Component Code Execution

Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable when operations occur outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Cyrus SASL SQL Injection

The vulnerability of the Cyrus SASL authentication mechanism lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

aimmo (>=0.61.9b59, <=1.4.6b776), alcali (>=2018.3.1, <=2019.2.3) +98 more potentially affected by CVE-2022-22818 via django (>=2.2.0, <=2.2.26)

django PYPI version =2.2.0, =0.61.9b59, =2018.3.1, =0.3.62, =0.14.0, =4.7.0, =4.10.0, =5.2.1, =0.1.0, =4.15.0, =4.15.0, =1.0.1, =1.0.0, =0.0.30, =0.0.1, =0.0.5 and more Source cves: CVE-2022-22818 Source advisory: OSV:GHSA-95RW-FX8R-36V6...

PT-2021-6247 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Defender for IoT. It can be exploited by a remote attacker using a specially crafted request,...

ePolicy Orchestrator Extension SQLi

The vulnerability of the ePolicy Orchestrator extension of the McAfee Data Loss Prevention software lies in the lack of measures taken to neutralize special elements used in SQL queries. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

PT-2021-17077

Name of the Vulnerable Software and Affected Versions godomall5 affected versions not specified Description The issue arises from the move uploaded file function in godomall5, which fails to perform an integrity check of file extensions or authority when users upload files. This allows an attacke...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2022-10721)

Aruba ClearPass Policy Manager is an application of Aruba, Inc. that provides wireless network security access management system Aruba ClearPass Policy Manager has a security vulnerability that stems from a remote arbitrary command execution vulnerability in Aruba ClearPass Policy Manager version...

Command injection

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...