SurveyKing 安全漏洞

SurveyKing is a powerful questionnaire system and exam system for javahuang individual developers. A security vulnerability exists in SurveyKing v1.3.1, which stems from the ability to keep a session active after a user logs out...

CreateWiki 安全漏洞

CreateWiki is a MediaWiki extension for Miraheze for requesting and creating wikis. A security vulnerability exists in CreateWiki that stems from an issue with fake wiki requestors...

Cacti 安全漏洞

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A security vulnerability exists in Cacti versions prior to 1.2.27, which...

Bouncy Castle 安全漏洞

Bouncy Castle is a collection of APIs used in cryptography organized by Bouncy Castle. It includes APIs for the Java and C programming languages . A security vulnerability exists in Bouncy Castle versions prior to 1.78, which stems from a carefully crafted f2m parameter that may cause excessive C...

Konga 安全漏洞

Konga is a full-featured, open source, multi-user GUI from the individual developer Panagis Tselentis in the Netherlands. A security vulnerability exists in Konga version v0.14.9, which stems from vulnerability to cross-site scripting XSS attacks...

Microsoft Bing 安全漏洞

Microsoft Bing is a web search engine from Microsoft Corporation USA. Please stay tuned to CNNVD or vendor announcements for information about a security vulnerability in Microsoft Bing...

Reportico 安全漏洞

Reportico is an open source PHP report designer from the individual developer Peter Deed. A security vulnerability exists in Reportico Web prior to version v.8.1.0 that originates from a vulnerability that allows a local attacker to execute arbitrary code and obtain sensitive information...

Cacti 安全漏洞

Cacti is a suite of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. A security vulnerability exists in Cacti versions prior to 1.2.27, which...

SurveyKing 安全漏洞

SurveyKing is a powerful questionnaire system and exam system for javahuang individual developers. A security vulnerability exists in SurveyKing v1.3.1, which originated from a vulnerability that allows an attacker to perform a session replay attack after a user changes their password...

Bouncy Castle 安全漏洞

Bouncy Castle is a collection of APIs used in cryptography organized by Bouncy Castle. It includes APIs for the Java and C programming languages . A security vulnerability exists in Bouncy Castle versions prior to 1.78, which stems from exception handling, where an RSA-based handshake may have a...

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Sourcecodester Human Resource Management System version 1.0, which stems from vulnerability to SQL injection attacks...

General Electric Healthcare Imaging 安全漏洞

GE General Electric Healthcare Imaging is a medical imaging device from General Electric GE. A security vulnerability exists in General Electric Healthcare Imaging. An attacker could exploit the vulnerability to elevate privileges...

OfferBox 安全漏洞

OfferBox is a recruiting application from OfferBox, Inc. OfferBox has a security vulnerability that stems from the use of hard-coded keys...

CmsEasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou ET Technology CmsEasy. A security vulnerability exists in CmsEasy version v7.7.7.9. An attacker can exploit the vulnerability to read arbitrary files...

CmsEasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou ET Technology CmsEasy. A security vulnerability exists in CmsEasy version v7.7.7.9. An attacker can exploit the vulnerability to read arbitrary files...

Deno 安全漏洞

Deno is open source for a simple, modern and secure JavaScript and TypeScript runtime environment. It uses V8 and is built with Rust. Deno has a security vulnerability. An attacker can exploit this vulnerability to elevate privileges...

D-LINK DIR-845L 安全漏洞

The D-Link DIR-845 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-LINK DIR-845L v1.01KRb03 version and earlier versions, which stems from an information disclosure issue in bscsmsinbox.php...

campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the campcodes Complete Web-Based School Management System, which originates from an SQL injection vulnerability in the index paramet...

The vulnerability of the fromDhcpListClient() function (/goform/DhcpListClient) in the Tenda AC500 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromDhcpListClient function /goform/DhcpListClient in the Tenda AC500 router’s software is related to the issue where an operation is performed outside the buffer in memory when processing the LISTEN length parameter. Exploiting this vulnerability can allow a remote...

MediaWiki 安全漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. MediaWiki suffers from a security vulnerability that stems from a MergeL example editing a GET...