Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox version 111, which stems from a fixed memory security hole...

SAP BusinessObjects Business Intelligence Platform Code Injection (3245526)

The version of SAP BusinessObjects Business Intelligence Platform installed on the remote Windows host is affected by a code injection vulnerability. Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number...

ManageEngine Access Manager Plus < 4.3 Build 4309 SQLi

The remote host is running a version of ManageEngine Access Manager Plus prior to 4.3 Build 4309. It is, therefore, affected by a SQL injection vulnerability. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the...

ManageEngine ServiceDesk Plus < 13.0 Build 13011 RCE

A remote code execution vulnerability exists in ManageEngine ServiceDesk Plus prior to 13.0 Build 13011 due to a flaw in the Analytics Plus integration input field validation. Vulnerability requires an administrator role access. Note that Nessus has not tested for this issue but has instead relie...

Grandstream Networks UCM6200 Series SQLi (Web UI)

A SQL injection vulnerability exists in Grandstream UCM6200 Series devices. An unauthenticated, remote attacker can exploit this to execute shell commands as root on versions before 1.0.19.20 or inject HTML in password recovery emails in versions before 1.0.20.17. Note that Nessus has not tested...

Apache APISIX Dashboard < 2.10.1 Authentication Bypass

The version of Apache APISIX Dashboard installed on the remote host is prior to 2.10.1. It is, therefore, affected by an authentication bypass vulnerability. An unauthenticated, remote attacker could exploit this to bypass authentication. Note that Nessus has not tested for these issues but has...

Amazon Corretto Java 8.x < 8.212.04.2 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.212.04.2. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2019-Apr-21 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 8.x < 8.202.08.1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.202.08.1. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2019-Jan-23 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 11.x < 11.0.6.10.1-1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.6.10.1-1. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2020-Jan-16 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Amazon Corretto Java 11.x < 11.0.2.9.3 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.2.9.3. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2019-Mar-19 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 8.x < 8.212.04.1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.212.04.1. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2019-Apr-16 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 8.x < 8.252.09.2 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.252.09.2. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2020-Apr-17 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Amazon Corretto Java 11.x < 11.0.9.12.1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.9.12.1. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2020-Nov-04 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reporte...

Amazon Corretto Java 11.x < 11.0.7.10.1-1 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 11 11.0.7.10.1-1. It is, therefore, affected by a vulnerability as referenced in the corretto-11-2020-Apr-22 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Amazon Corretto Java 8.x < 8.232.09.2 Vulnerability

The version of Amazon Corretto installed on the remote host is prior to 8 8.232.09.2. It is, therefore, affected by a vulnerability as referenced in the corretto-8-2019-Nov-20 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

CVE-2022-21724

pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based o...

CVE-2022-21724 Unchecked Class Instantiation when providing Plugin Classes

pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based o...

CVE-2022-21724 Unchecked Class Instantiation when providing Plugin Classes

pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based o...

CVE-2022-21724

pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based o...

CVE-2022-21724

pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system using the postgresql library will be attacked when attacker control the jdbc url or properties. pgjdbc instantiates plugin instances based o...