1718 matches found
RaiseDreams Crowdfunding System version 2.2.4 SQL Injection Vulnerability in '/User/Handler1.ashx' File
RaiseDreams is an enterprise-level crowdfunding website platform. A SQL injection vulnerability exists in the '/User/Handler1.ashx' file in version 2.2.4 of the RaiseDreams Crowdfunding System, which allows an attacker to exploit the vulnerability to execute SQL statements, as well as add a super...
SQL injection vulnerability in the nRecno parameter of the GetRegistInfoAjax.aspx page of the ilas online library system of Shenzhen Ketu Automation New Technology Application Co.
Integrated Library Automation System ILAS is the Ministry of Culture in 1988 as a national key scientific and technological projects issued by the Shenzhen Library to undertake and organize the development of a set of libraries at home and abroad to adapt to different levels, a variety of scales,...
SQL Injection Vulnerability in Human Resource Network Management System of Hunan Qingguo Software Co.
Hunan Qingguo Software Co., Ltd. human resources network management system is mainly used in the field of university education management WEB system. The product exists /rlweb/data/rule.aspx?id=Page there is a SQL injection vulnerability, the injection parameter is: id Attackers can use the...
SQL injection vulnerability in CircleManage/FindUsers.aspx page of ECTS website building system of Shanghai Hongyu Information Technology Co.
ECS ECS education site system is a general-purpose CMS program developed by Shanghai Hongyu Information Technology Co., Ltd. for schools, education and other site-building system. A SQL injection vulnerability exists in the CircleManage/FindUsers.aspx page of the product, which can be exploited t...
Trend Micro Control Manager Information Disclosure Vulnerability
Trend Micro Control Manager TMCM is an integrated threat detection and data protection management center software from Trend Micro. An information disclosure vulnerability exists in version 6.0 of Trend Micro Control Manager TMCM, which can be exploited by an attacker to gain access to sensitive...
Will Tiger uRouter wireless router discovered multiple security vulnerabilities-vulnerability warning-the black bar safety net
A long story short Will Tiger uRouter wireless router is a by the Chinese will Tiger technology production and sales of enterprise class intelligent routing products. It looks impeccable, but it did not do pretty and intelligent－because this device is the presence of multiple serious security...
CVE-2016-5390
Foreman before 1.11.4 and 1.12.x before 1.12.1 allow remote authenticated users with the viewhosts permission containing a filter to obtain sensitive network interface information via a request to API routes beneath "hosts," as demonstrated by a GET request to api/v2/hosts/secrethost/interfaces...
Design Logic Vulnerabilities in Tianchu Information Technology Limited's Construction CMS System
Tianchu Information Technology Co., Ltd. is a technical company dedicated to website construction and operation, educational software development and e-commerce platform operation. A design logic vulnerability exists in Tianchu Information Technology Limited's construction CMS system, allowing...
SQL Injection Vulnerability in the Online Data Analysis System of Jinan Angliwan Software Development Co.
Online data analysis system of Jinan Onlivan Software Development Co. Online Data Analysis System suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
UBUNTU-CVE-2016-3814
The NVIDIA camera driver in Android before 2016-07-05 on Nexus 9 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28193342...
SQL injection vulnerability in the searchKeys parameter of the newspaper system createcd.jsp page at Beijing Zixin Newspaper Technology Development Co.
Zixin Newspaper Digital Newspaper System is a professional information-based multimedia publishing platform for internal journals, newspapers and magazines in different industries, such as newspapers, magazines, schools, groups of enterprises, governments and non-profit organizations. SQL injecti...
SQL Injection Vulnerability in Xunjie Network Broadband Billing Management System
Shenzhen Youjialian Technology Co., Ltd. is a provider of client-side network and communication technology and equipment. Xunjie Network Broadband Billing Management System is the billing system of Shenzhen Youjialian Technology Co. A SQL injection vulnerability exists in the Xunjie Network...
CVE-2016-4998
The IPTSOSETREPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service out-of-bounds read or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted...
SQL Injection Vulnerability in Hohhot's Web Management System
HaoHui Enterprise Management SystemHaoHui Enterprise Management System is an enterprise management system for small and medium-sized enterprises in China. A SQL injection vulnerability exists in the Hohui Technology Website Management System. It allows attackers to utilize commonly used SQL...
CVE-2016-5728
Race condition in the vopioctl function in drivers/misc/mic/vop/vopvringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service memory corruption and system crash by changing a certain header, ak...
CVE-2016-3713
The msrmtrrvalid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR 0x2f8, which allows guest OS users to read or write to the kvmarchvcpu data structure, and consequently obtain sensitive information or cause a denial of service system crash, via a crafted ioctl call...
SQL Injection Vulnerability in minX Parameters of Zhongke Xinye Network Security Audit Platform
Zhongke Xinye Network Security Audit Platform is an Internet behavior analysis system. A SQL injection vulnerability exists in Zhongke Xinye Network Security Audit Platform due to the program not adequately filtering the minX parameter. An attacker is allowed to exploit the vulnerability to obtai...
CVE-2016-0707
The agent in Apache Ambari before 2.1.2 uses weak permissions for the 1 /var/lib/ambari-agent/data and 2 /var/lib/ambari-agent/keys directories, which allows local users to obtain sensitive information by reading files in the directories...
Apple iOS/Safari Information Disclosure Vulnerability
Apple iOS is Apple's operating system for several smart devices.Apple Safari is an American Apple web browser that is the default browser that comes with the Mac OS X and iOS operating systems. The page load implementation in WebKit in Apple iOS before 9.3 and Safari before 9.1 fails to properly...