GHSA-PWHF-39XG-4RXW Script injection

Impact A malicious internal actor is able to upload documentation content with malicious scripts. These scripts would normally be sanitized by the TechDocs frontend, but by tricking a user to visit the content via the TechDocs API, the content sanitazion will be bypassed. If the TechDocs API is...

Unspecified vulnerability in Backstage (CNVD-2021-44721)

Backstage is an open platform for building developer portals, and techdocs common contains the common features of Backstage's techdocs. An unspecified vulnerability exists in Backstage. An attacker can exploit the vulnerability to access sensitive data...

Unspecified Vulnerability in Backstage

Backstage is the open platform for building developer portals. An unspecified vulnerability exists in Backstage. An attacker could exploit the vulnerability to access sensitive data...

SQL Injection Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform (CNVD-2021-41969)

Beijing Byzoro Networks Technology Co., Ltd Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet by providing a full range of security solutions for industry users around the direction of network security business. PatrolFlow Multi-service Security...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. macOS suffers from an input validation error vulnerability that stems from insufficient validation of user-supplied input when processing paths in smbx. A remote attacker on a local network could exploit this...

Information Leakage Vulnerability in Riptide Networks' MCP Marketing Cloud Platform

Ruijie Networks is a CT infrastructure and industry solutions provider, with the main business of research, development, design and sales of network equipment, network security products and cloud desktop solutions. An information leakage vulnerability exists in Ruijie Network's MCP marketing clou...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-40199)

Tianxin Instrumentation Group Limited Company is a domestic service provider of flow meters and gas application system solutions. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited Company. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in Hanvon's Face Recognition Attendance Management System

Ltd. is committed to the research and application of intelligent interaction technology in multiple fields. A SQL injection vulnerability exists in Hanvon's face recognition attendance management system. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38040)

SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Microsoft Windows Multiple Vulnerabilities (KB5003173)

This host is missing a critical security update according to Microsoft KB5003173 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5003174)

This host is missing a critical security update according to Microsoft KB5003174 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5003172)

This host is missing a critical security update according to Microsoft KB5003172 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Hurricane CMS 1.1.0 SQL Injection Vulnerability in Backend

Hurricane CMS is an open source CMS system, features all open source, efficient and convenient secondary development, simple background, plug-in categorization, adapt to various types of websites to expand the construction. Hurricane CMS1.1.0 background SQL injection vulnerability , attackers can...

PT-2021-10282 · Unknown · Online Book Store

Name of the Vulnerable Software and Affected Versions: Online Book Store version 1.0 Description: The issue is related to an Incorrect Access Control vulnerability. It could allow a remote malicious user to bypass authentication and obtain sensitive information via the admin verify.php endpoint...

Vulnerabilities fixed in Samsung products

Several vulnerabilities have been fixed in various Android-based products from Samsung. The vulnerabilities allow a malicious person, remotely or otherwise, to carry out attacks that lead to the following categories of damage: Manipulation of data Circumvention of security measure Remote code...

Aruba Networks AirWave Management Platform 代码问题漏洞

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management. An XML external entity injection vulnerability exists in Aruba Networks AirWave Management Platform versions prior to 8.2.12.1, which can be exploited by a remote attacker to submit a...

Vulnerabilities fixed in GitLab CE and EE

GitLab has fixed several vulnerabilities in GitLab Community Edition and Enterprise Edition. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Bypassing authentication Accessing sensitive da...

SQL Injection Vulnerability in Telecom Gateway Configuration Management System it***_te***_po***.php Page

China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the ittepo.php page of the Telecom Gateway Configuration Management System, which can be exploited by attackers to...

SQL Injection Vulnerability in HBI System of Beida Medical Information System

The built-in dashboard of Beida Medical HBI system supports multiple devices, allowing you to seamlessly enjoy the ultimate experience of cross-screen technology on your computer, tablet and cell phone. A SQL injection vulnerability exists in Beida Medical HBI system, which can be exploited by...

Vulnerabilities fixed in Oracle Communications

Vulnerabilities have been fixed in Oracle Communications. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Access to sensitive data Access to system data Increased user...