Wenzhou Starlight Technology Development Co., Ltd. website builder system newLook.asp page SQL injection vulnerability

Wenzhou Starlight Technology Development Co., Ltd. website builder is a website builder system. There is a SQL injection vulnerability in the newLook.asp page of the website builder system of Wenzhou Starlight Technology Development Co. The vulnerability is due to the system fails to effectively...

SQL injection vulnerability in the nav_id parameter of the arc.php page of the Yuntrun website builder system

Yuntrue United website builder system is a website builder system SQL injection vulnerability exists in the navid parameter on the arc.php page of the Yuntrun website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Paysan Network Backend Management System

Paixiang network backstage management system is a station-building system developed by Zhejiang Soupai Information Technology Co. There is a SQL injection vulnerability in the id parameter of PaiSang's backend management system, which can be exploited by an attacker to obtain sensitive informatio...

Security feature bypass

The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reportinguser role could execute a report with the permissions of another reporting user, possibly gaining access to...

CVE-2017-8446

The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reportinguser role could execute a report with the permissions of another reporting user, possibly gaining access to...

CVE-2014-3462

The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes"...

CVE-2014-3462

The CVE-2014-3462 issue affects encfs before 1.7.5, where the .encfs6.xml configuration file can be manipulated by setting blockMACBytes to 0 and increasing blockMACRandBytes by 8, enabling a remote attacker to access sensitive data. Public reports consistently describe this as a data disclosure ...

SQL injection vulnerability in the init function of iCMS latest version V7admincp.class.php page

iCMS is a free, clean, efficient, and useful PHP content management system. The latest version of iCMS V7admincp.class.php page init function has a SQL injection vulnerability that can be exploited by attackers to bypass the backend and directly log into the system to obtain sensitive information...

Multiple vulnerabilities in Google Android Qualcomm components (CNVD-2017-14381)

Android is a free and open-source Linux-based operating system used primarily on mobile devices. Multiple vulnerabilities exist in the Google Android Qualcomm component. An attacker can exploit the vulnerabilities to obtain sensitive information and execute arbitrary code with elevated privileges...

SQL Injection Vulnerability in getNew Method of ShopSn V2.0 Mall System

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd , an enterprise-class commercial standard full-featured allow free commercial use of the open source online store system. ShopSn V2.0 mall system getNew method SQL injection vulnerability. An...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2017-12792)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information, bypass security restrictions, and perform...

The vulnerability of the TrustZone component of the Android operating system allows a hacker to gain access to information.

The vulnerability of the TrustZone component in the Android operating system is related to unvalidated array indexing. Exploiting this vulnerability can allow a remote attacker to gain access to sensitive information...

CVE-2017-0647

An information disclosure vulnerability in libziparchive could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 5.0.2, 5.1.1, 6.0,...

Cisco Remote Expert Manager Temporary File Information Disclosure Vulnerability

Cisco Remote Expert Manager Software is the United States Cisco Cisco a remote management software. The software remote screen sharing, screen annotation and session recording and other collaborative functions. Cisco Remote Expert Manager Software has a temporary file information disclosure...

SQL Injection Vulnerability in 'menu_id' Parameter of Pioneer Hi-Tech Government System

Pioneer Hi-Tech Government System is an "easy technology" system. A SQL injection vulnerability exists in the 'menuid' parameter of the Pilot Hi-Tech Government System. This vulnerability can be exploited by attackers to obtain sensitive information from the database...

IBM Tealeaf Customer Experience Local Information Disclosure Vulnerability

IBM Tealeaf CX is a customer experience analysis software. A local information disclosure vulnerability exists in IBM Tealeaf Customer Experience. An attacker could exploit this vulnerability to obtain sensitive information...

Directory Traversal

pooledwebsocket is vulnerable to directory traversal attacks. Attackers can access sensitive data and files on a server by requesting URLs such as /..%2f..%2fetc/passwd...

F5 Networks BIG-IP : MCPD vulnerability (K52180214)

In some cases, the MCPD binary cache may allow a user with Advanced Shell access to temporarily obtain normally unrecoverable information. CVE-2016-7474 Impact A local user may have access to sensitive data such as passwords for recently created local user accounts and passphrases that have been...

CVE-2017-0334

An information disclosure vulnerability in the NVIDIA GPU driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions:...

SQL Injection Vulnerability in Love Lover Matters Management System v4.0

LOVE LOVE Personnel Management System is a personnel management system for small and medium-sized enterprises as well as micro-enterprises. The system suffers from a SQL injection vulnerability in the login area. The program fails to perform strict filtering on the username variable, allowing an...