QNAP Systems QTS and QuTS hero Operating System Command Injection Vulnerability

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. QNAP Systems QTS and QuTS hero are vulnerable to an operating system...

QNAP Systems QTS Operating System Command Injection Vulnerability

QNAP Systems QTS is an operating system used by China Weilian Technology QNAP Systems for entry to mid-level QNAP NAS. QNAP Systems QTS has an operating system command injection vulnerability that stems from the presence of an operating system command injection vulnerability that could allow an...

The vulnerability of the IBM DB2 database management system, related to deficiencies in access control, allows a perpetrator to execute arbitrary code.

The vulnerability of the IBM DB2 database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves errors in privilege management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafted HTTP requests remotely...

Subrion CMS Security Vulnerability

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports a variety of extensions plugins and more. A security vulnerability exists in Subrion CMS version 4.2.1. An attacker exploiting this vulnerability can remotely...

The vulnerability of the JeecgBoot development platform, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the JeecgBoot development platform lies in the lack of measures taken to protect the SQL query structure during the processing of the id parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Cross site scripting

Cross Site Scripting vulnerability in BigTree CMS v.4.5.7 allows a remote attacker to execute arbitrary code via the ID parameter in the Developer Settings functions...

CVE-2023-44025

SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the getrulebyid function in the AddifyfreegiftsModel.php component...

CVE-2023-5857

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malicious file. Chromium security severity: Medium...

CVE-2023-5857

Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially execute arbitrary code via a malicious file. Chromium security severity: Medium...

Remote code execution

The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges...

The vulnerability of the web server used by the Mirth Connect healthcare management optimization tool allows a perpetrator to execute arbitrary code.

The vulnerability of the web server used by the Mirth Connect healthcare management optimization tool is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

SUSE CVE-2015-7501

Red Hat JBoss A-MQ 6.x; BPM Suite BPMS 6.x; BRMS 6.x and 5.x; Data Grid JDG 6.x; Data Virtualization JDV 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works FSW 6.x; Operations Network JBoss ON 3.x; Portal 6.x; SOA Platform SOA-P 5.x; Web Server JWS 3.x;...

SUSE CVE-2023-2295

A vulnerability was found in the libreswan library. This security issue occurs when an IKEv1 Aggressive Mode packet is received with only unacceptable crypto algorithms, and the response packet is not sent with a zero responder SPI. When a subsequent packet is received where the sender reuses the...

PT-2023-6645 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to insufficient data validation in USB in Google Chrome, allowing a remote attacker to perform out of bounds memory access via a crafted HTML page. This could...

CVE-2023-21315

CVE-2023-21315 describes a heap-based out-of-bounds read in Bluetooth that could cause remote information disclosure without require­ing privileges or user interaction. The NVD entry assigns CVSSv3.1: AV=Adjacent, AC=L, PR=NONE, UI=NONE, S=U, C=H, I=N, A=N with a base score of 6.5 (Medium). The A...

apache-commons-text: variable interpolation RCE

A flaw was found in Apache Commons Text packages 1.5 through 1.9. The affected versions allow an attacker to benefit from a variable interpolation process contained in Apache Commons Text, which can cause properties to be dynamically defined. Server applications are vulnerable to remote code...

The vulnerability of the JmsBlog module in the open-source e-commerce web application PrestaShop allows a hacker to execute arbitrary SQL queries.

The vulnerability of the JmsBlog module in the open-source e-commerce PrestaShop web application relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

The vulnerability in the admin-ajax.php script of the Photo Gallery administration panel of the WordPress content management system allows a hacker to execute arbitrary SQL code.

The vulnerability in the admin-ajax.php script of the Photo Gallery administration panel of the WordPress content management system is related to the failure to protect the SQL query structure during the processing of the bwgtagidbwgthumbnails0 parameter. Exploiting this vulnerability allows an...

The vulnerability of the web page rendering modules in Safari’s WebKit browser for iOS, watchOS, tvOS, iPadOS operating systems allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKit of Safari browsers for iOS, watchOS, tvOS, and iPadOS lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...