CVE-2021-29143

Aruba AOS-CX switches are affected by CVE-2021-29143 (remote code execution). The vulnerability targets Aruba CX 6200F, 6300, 6400, 8320, 8325, 8400, and CX 8360 series with firmware ranges: 10.04.xxxx before 10.04.3070, 10.05.xxxx before 10.05.0070, 10.06.xxxx before 10.06.0110, and 10.07.xxxx b...

MySQL memcached Plugin Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MySQL. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Append and Prepend commands in the memcached plugin. The issue results from the...

Oracle Business Intelligence SchedulerConfigPage11g JNDI Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Business Intelligence. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of the SchedulerConfigPage11g class. The issue results from the...

SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2021:2439-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2439-1 advisory. - CVE-2021-22925: TELNET stack contents disclosure again. bsc1188220 - CVE-2021-22924: Bad connection reuse due to flawed path name...

Sourcecodester Alumni Management System SQL注入漏洞

Sourcecodester Alumni Management System is a Php, Mysql-based alumni management system from Sourcecodester, Inc. SourceCodester Alumni Management System version 1.0 is vulnerable to SQL injection, which allows remote attacker can exploit this vulnerability to execute arbitrary SQL statements via...

PT-2021-17128 · Unknown · Phpgurukul Student Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Record System version 4.0 Description: The issue allows remote attackers to execute arbitrary SQL statements. This is achieved via the id parameter to the "edit-std.php" endpoint. Recommendations: For PHPGurukul Student...

sourcecoester Theme Park Ticketing System SQL注入漏洞

SourceCodester Theme Park Ticketing System is a software application. A simple PHP/MySQLi project that helps to manage and generate tickets for theme park or amusement park visitors. SourceCodester Theme Park Ticketing System suffers from a SQL injection vulnerability that stems from a lack of...

SourceCodester E-Commerce Website SQL注入漏洞

SourceCodester E-Commerce Website is a software application. A PHP e-commerce website project for bookstores. A SQL injection vulnerability exists in SourceCodester E-Commerce Website version V1.0, which originates from a lack of validation of the update parameter of empViewUpdate.php against an...

[ASA-202107-46] opera: arbitrary code execution

Arch Linux Security Advisory ASA-202107-46 ========================================== Severity: High Date : 2021-07-21 CVE-ID : CVE-2021-30541 CVE-2021-30559 CVE-2021-30560 CVE-2021-30561 CVE-2021-30562 CVE-2021-30563 CVE-2021-30564 Package : opera Type : arbitrary code execution Remote : Yes Lin...

Apple macOS 缓冲区错误漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in macOS, which can be exploited by a remote attacker to create a specially crafted font file, trick a victim into opening it, trigger a stack-based buffer overflow, and execut...

PT-2021-11763 · Unknown · Phpgurukul Employee Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Employee Record Management System version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands and bypass authentication. This is a SQL injection vulnerability. Recommendations: For PHPGurukul Employ...

CVE-2021-35963

The specific parameter of upload function of the Orca HCM digital learning platform does not filter file format, which allows remote unauthenticated attackers to upload files containing malicious script to execute RCE attacks...

Moodle SQL注入漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from an SQL injection vulnerability that stems from insufficient processing of user-supplied data in the library that...

Insteon HD IP Camera Remote Code Execution (CVE-2018-11560; CVE-2018-12640)

A remote code execution vulnerability exists in Insteon HD IP Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

fail2ban 代码注入漏洞

fail2ban is a software application. Disable causes multiple hosts with authentication errors. fail2ban suffers from a code injection vulnerability that could lead to remote code execution. To exploit the vulnerability, an attacker would need to insert malicious characters into the response sent b...

CVE-2021-3043

A reflected cross-site scripting XSS vulnerability exists in the Prisma Cloud Compute web console that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console while an authenticated administrator is using that web interface. Prisma Cloud Compute SaaS versio...

CVE-2021-0515

In Factory::CreateStrictFunctionMap of factory.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

...

PT-2021-4150 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Windows DNS Snap-in component, specifically affecting the dnsmgmt.msc module. This allows remote attackers to execute...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2021-50185)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager suffers from a command injection vulnerability that arises from the web interface of the product's ClearPass feature failing to...