Vulnerabilities fixed in Oracle Database Server

Vulnerabilities have been fixed in Oracle Database Server. The vulnerabilities allow a malicious person to perform attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Access to sensitive data Access to system data...

SQL Injection Vulnerability in Qibo Enterprise System

Qibo enterprise system is specifically tailored to the enterprise station, in the original Qibo CMS developed on the basis of the CMS, in addition to the CMS complex functions, increased the enterprise station required by the characteristics of the function. Qibo Enterprise System has a SQL...

Vulnerabilities fixed in Juniper Junos Space

Juniper Networks has fixed vulnerabilities in Junos Space. The include vulnerabilities in Junos Space itself as well as vulnerabilities in third-party software. The vulnerabilities allow a malicious party potentially able to launch attacks that lead to the following categories of damage: Cross-Si...

SQL Injection Vulnerability in Shipping 100 Cards Consignment System

Ship 100 Cachet Consignment System is a set of virtual goods auto-shipment system/article pay to read system, no manual duty, customers can buy online to automatically complete the transaction. SQL injection vulnerability exists in Shipment 100 Consignment System, which can be exploited by...

Information leakage vulnerability of coal mine comprehensive informationization management and control platform of Jiangsu Sanheng Technology Co.

Jiangsu Sanheng Technology Co., Ltd. is a joint-stock technology enterprise, the company's products mainly have three specialized directions: mine safety, mine communication, mine automatic control. The main systems are KJ70X coal mine safety monitoring system, KJ128A mine personnel management...

Microsoft Windows Multiple Vulnerabilities (KB5001335)

This host is missing a critical security update according to Microsoft KB5001335 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5001347)

This host is missing a critical security update according to Microsoft KB5001347 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SAP NetWeaver Master Data Management 信息泄露漏洞

SAP NetWeaver Master Data Management SAP MDM is a software from SAP Germany for managing inter-enterprise collaboration. An information disclosure vulnerability exists in SAP NetWeaver Master Data Management 710, 710.750, which can be exploited by an attacker to gain access to highly sensitive da...

Vulnerabilities fixed in Siemens products

Vulnerabilities have been fixed in Siemens products. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Circumvention of security measure. Remote code execution Administrator/Root right...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28831)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

Vulnerabilities fixed in Samsung products

Vulnerabilities have been fixed in several Samsung products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data...

U.S. Dept Of Defense: Administration Authentication Bypass on https://█████

Hi there I found a way to connect to an administration space on your website https://██████████ how to reproduce ? 1 - go to this link : https://███/██████████ 2 - create a html file with : html 3 - launch the file, click on the button and return to the page https://███████/█████ 4 - refresh the...

Vulnerabilities fixed in GitLab

Several vulnerabilities have been fixed in GitLab Community Edition CE and Enterprise Edition EE. The vulnerabilities allow a remote unauthenticated malicious person potentially able to perform attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF Cross-Site...

Vulnerabilities fixed in Atlassian Jira

Atlassian has fixed several vulnerabilities in Jira. The vulnerabilities potentially enable a remote malicious person to able to launch attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Circumvention of security measure Accessing sensitive data Accessing...

Vulnerabilities fixed in Cisco products

Vulnerabilities have been fixed in Cisco products. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS. Remote code execution Administrator/Root rights Access to sensiti...

SQL Injection Vulnerability in Ke361 Backend Mo***.cl***.php

Ke361 is an open source Taobao system, based on the latest ThinkPHP3.2 version of the development, to provide a more convenient and secure WEB application development experience, the Taobao system adopts a new architectural design and namespace mechanism, the integration of modular, driven and...

Information leakage vulnerability in H5S CONSOLE of ZeroVision Technology (Shanghai) Co.

ZeroVision Technology Shanghai Co. was founded on 09/25/2018. Legal representative Xue Shuimu, the company's business scope includes: engaged in computer technology, network technology, electromechanical technology, electronic technology, information technology, digital technology, communication...

SQL Injection Vulnerability in Ke361 (CNVD-2021-24525)

Ke361 is an open source Taobao system. Ke361 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive database data...

S-CMS News Portal System Backend SQL Injection Vulnerability

S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. There is a SQL injection vulnerability in the background of S-CMS News Portal System. Attackers can use the vulnerability to obtain sensitive informati...

SQL Injection Vulnerability in Joomla DigiCom Component ge*** Functions

Joomla is a globally recognized content management system, with 6% of the world's website market share. Joomla! is a software system developed using the PHP language with a MySQL database.DigiCom is a third-party component of Joomla. Joomla DigiCom component ge function SQL injection vulnerabilit...