298 matches found
Exploit for Code Injection in Vbulletin
vBulletin RCE 5.x Get Email + SMTP CVE-2019-16759 This tool...
DEBIAN-CVE-2020-15103
In FreeRDP less than or equal to 2.1.2, an integer overflow exists due to missing input sanitation in rdpegfx channel. All FreeRDP clients are affected. The input rectangles from the server are not checked against local surface coordinates and blindly accepted. A malicious server can send data th...
Guangzhou Suoai Digital Technology Co., Ltd Suoai Smart Payment Speaker E-50 has a logic flaw vulnerability
The Sony Ericsson Group is a high-tech conglomerate that specializes in Bluetooth headphones, LCD TVs, smart audio, Bluetooth stereos, Karaoke entertainment devices, cell phones, amplifiers and other verticals based on multimedia series products. Guangzhou Suoai Digital Technology Co. Suoai Smart...
CVE-2020-14559
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 5.6.48 and prior, 5.7.30 and prior and 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple...
CVE-2020-4025
The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Sit...
freerdp: Out-of-bounds write in planar.c
A flaw was found in freerdp in versions between 1.0 and 2.0.0. An out-of-bounds memory write was found in the planar.c function which could allow an attacker to control data sent from the RDP server to the client. The highest threat from this vulnerability is to data confidentiality and integrity...
DEBIAN-CVE-2020-11044
In FreeRDP greater than 1.2 and before 2.0.0, a double free in updatereadcachebitmapv3order crashes the client application if corrupted data from a manipulated server is parsed. This has been patched in 2.0.0...
SQL Injection Vulnerability in ILAS III Digital Library System
Integrated Library Automation System ILAS is a set of integrated library automation system that can be adapted to the use of libraries of different levels, scales and types at home and abroad, which is undertaken and organized by the Shenzhen Library. ILAS III digital library system SQL injection...
Oracle MySQL Server DDL DoS
The vulnerability of the Server:DDL component of the Oracle MySQL database management system is related to an uncontrolled consumption of system resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
CVE-2019-20402
Support zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be downloaded by a System Administrator user without requiring the user to re-enter their password via an improper authorization vulnerability...
CVE-2019-19802
In Gallagher Command Centre Server v8.10 prior to v8.10.1134MR4, v8.00 prior to v8.00.1161MR5, v7.90 prior to v7.90.991MR5, v7.80 prior to v7.80.960MR2 and v7.70 or earlier, an authenticated user connecting to OPCUA can view all data that would be replicated in a multi-server setup without...
Ltd. website building system has SQL injection vulnerabilities
Ltd. is Xi'an website construction, Xi'an website construction and design, Xi'an website construction and promotion, Xi'an website construction and optimization of professional networking company. Ltd. website construction system there is a SQL injection vulnerability, attackers can use the...
SQL Injection Vulnerability in Jiangmen Pengjiang Kehui Development Co.
Ltd. is a value-added telecommunication service provider offering website construction, WeChat public number service, WeChat small program development, microsite construction, web hosting, web design, program development, enterprise mailbox and website promotion, Flash animation and multimedia...
SQL Injection Vulnerability in Website Building System of Shanghai Yijue Network Technology Co.
Shanghai Yijue Network Technology Co., Ltd. is a joint-stock enterprise engaged in corporate website construction, website revision, website maintenance, website promotion, 400 phone for website business. There is a SQL injection vulnerability in the website construction system of Shanghai Yijue...
Oracle MySQL Server DDL DoS
The vulnerability of the Server:DDL component of the Oracle MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the MySQL network protocol...
CVE-2019-2226
In deviceclasstoint of deviceclass.cc, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8...
Xingtai Tenghe Network Technology Co., Ltd. website building system has SQL injection vulnerabilities
Xingtai Tenghe Network Technology Co., Ltd. is a company that provides comprehensive Internet solutions. Xingtai Tenghe Network Technology Co., Ltd. has a SQL injection vulnerability in its website builder system, which can be exploited by attackers to obtain sensitive server information...
PT-2019-13930
Name of the Vulnerable Software and Affected Versions Atlassian Troubleshooting and Support Tools plugin versions prior to 1.17.2 Bitbucket Server / Data Center versions prior to 6.6.0 Confluence Server / Data Center versions prior to 7.0.1 Jira Server / Data Center versions prior to 8.3.2 Crowd ...
