Medium: libvncserver

Issue Overview: Improper input sanitization in rfbProcessClientNormalMessage in rfbserver.c An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage in rfbserver.c does not sanitize msg.cct.length, leading to access to uninitialized and potentially sensitive data or...

Google Android Framework (aosp email application) Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Framework aosp email application is a framework for email applications. Framework aosp email application is one of the...

SQL Injection Vulnerability at CMS destination

Situ CMS is a self-developed website management system suitable for tourism website construction. A SQL injection vulnerability exists in CMS destination. The vulnerability is caused due to the system failing to strictly filter user input data. An attacker can exploit this vulnerability to obtain...

Multiple SQL Injection Vulnerabilities in GxlcmsQY System

GxlcmsQY system is a simple program tailored for business users. GxlcmsQY System has multiple SQL injection vulnerabilities. An attacker can exploit the vulnerabilities to obtain sensitive database information...

Apple Mac OS X Security Updates (HT208692)-01

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dongdao network cms has SQL injection vulnerability

Dongdao Network is committed to e-commerce and network product development, business content includes professional website construction and maintenance, B2B B2C e-commerce platform development, construction and operation of large-scale portals, planning and development, B / S-type OA system...

Arbitrary File Read Vulnerability in Light CMS Version 1.7

Light CMS is an intelligent website building system built in PHP+MYSQL environment. Light CMS 1.7 version of the arbitrary file reading vulnerability, an attacker can exploit the vulnerability to read any file within the site to obtain sensitive information...

SQL Injection Vulnerability in BEESCMS Frontend member.php and order_save.php Pages

BEESCMS is an enterprise website management system based on PHP+Mysql architecture. A SQL injection vulnerability exists in the BEESCMS frontend member.php and ordersave.php pages. An attacker can exploit the vulnerability to obtain sensitive database information...

TestLink Open Source Test Management Insecure Direct Object Reference Vulnerability

Exploit for php platform in category web applications ======================================================================= title: Insecure Direct Object Reference product: TestLink Open Source Test Management vulnerable version: 1.9.17 fixed version: 1.9.17 after November 2017, and the current...

Website Security Dog suffers from SQL Injection Vulnerability

Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. Website Security Dog suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL injection vulnerability in admin_datarelate.php page of DuomiCms movie and TV management system

DuomiCms is a video-on-demand system designed for film and television station owners. A SQL injection vulnerability exists in the admindatarelate.php page of the Duomi DuomiCms Movie and TV Management System x3.0UTF8Official Edition. An attacker can exploit the vulnerability to obtain sensitive...

Mozilla Firefox Security Advisories (MFSA2018-02, MFSA2018-03) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

SQL Injection Vulnerability in the Enterprise Website System of Zhongshan Tengning Network Technology Co.

Zhongshan TENNING Network Technology Co., Ltd. is a professional and technical company focusing on enterprise website construction, promotion, WeChat development, focusing on providing SMEs with the most cost-effective website building services. TENNING Network Technology Co., Ltd. corporate...

Microsoft Windows Multiple Vulnerabilities (KB4056898)

This host is missing an important security update according to Microsoft KB4056898 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB4056897)

This host is missing an important security update according to Microsoft KB4056897 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

SQL Injection Vulnerability in Diyou p2p Lending System V4.1

Diyou P2P lending system is a cloud-based p2p lending system, p2p lending program software and online financial investment system. A SQL injection vulnerability exists in emperor friend p2p lending system V4.1, the vulnerability is due to the program failing to effectively filter the data submitt...

Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2018-00751)

Internet Explorer is a web browser from Microsoft. An information disclosure vulnerability exists in Microsoft Internet Explorer, which can be exploited by an unauthenticated, remote attacker to gain access to sensitive information on the target system...

SQL Injection Vulnerability in Intelligent Website Building System of Dongying Navigator Network Technology Co.

Dongying Navigator Network Technology Co., Ltd formerly Navigator Internet is a professional company that provides services such as website construction and production, website promotion and optimization, and overall solutions for network marketing. Dongying Pilot Network Technology Co., Ltd...

Berjun BOS backend management system suffers from jboss deserialization command execution vulnerability

Shanghai Bojun Software Technology Co., Ltd. is a provider of integrated solutions for the fashion industry. Bethune BOS backend management system exists jboss deserialization command execution vulnerability. The vulnerability is due to the JBOSS middleware deployment interface is not deleted,...

MGASA-2017-0403 Updated lucene packages fix security vulnerability

It was found that the CoreParser class in Lucene accepts doctype declaration and expands external entities. An attacker could use this flaw to bypass security restrictions and access sensitive data CVE-2017-12629...