Lucene search
+L

6880 matches found

CNVD
CNVD
•added 2021/07/01 12:00 a.m.•38 views

Unauthorized access vulnerability in the interlib library cluster management system (CNVD-2021-49125)

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. The...

6.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/06/29 12:00 a.m.•19 views

The vulnerability of the get_topic_info() function (sys/CODOF/Forum/Topic.php) in the Codoforum forum creation software allows a violator to execute arbitrary code.

The vulnerability of the gettopicinfo function sys/CODOF/Forum/Topic.php in the Codoforum forum creation software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system remotely...

10CVSS8.3AI score0.04915EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/29 12:00 a.m.•15 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken to protect the website structure, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser using ...

6.4CVSS6AI score0.01397EPSS
SaveExploits0References3Affected Software2
CNVD
CNVD
•added 2021/06/28 12:00 a.m.•41 views

SQL Injection Vulnerability in Guangzhou Tutron interlib Library Cluster Management System

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. There i...

7.5AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/25 12:00 a.m.•52 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00935EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/25 12:00 a.m.•53 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.01168EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/25 12:00 a.m.•91 views

Apple macOS AudioToolboxCore AAC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the AudioToolboxCore library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists with...

3.3CVSS4.1AI score0.00878EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/25 12:00 a.m.•55 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00952EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/25 12:00 a.m.•66 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00952EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/25 12:00 a.m.•55 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.009EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/25 12:00 a.m.•64 views

Apple macOS ImageIO PCT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS3.6AI score0.01196EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/25 12:00 a.m.•54 views

Apple macOS ModelIO USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the ModelIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

3.3CVSS4AI score0.00952EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/06/25 12:00 a.m.•17 views

The vulnerability of the \hms\admin\appointment-history.php component, a web application for managing hospitals within the PHPGurukul Hospital Management System, allows an attacker to intercept cookie files.

The vulnerability of the \hms\admin\appointment-history.php web application, a hospital management system for PHPGurukul, is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow an attacker to intercept cookie files...

5.5CVSS5.9AI score0.0052EPSS
SaveExploits1References3Affected Software1
Code423n4
Code423n4
•added 2021/06/23 12:00 a.m.•17 views

Test configuration carryover to production deployment limits pool users to 5

Handle 0xRajeev Vulnerability details Impact The project uses a data structure for indexing ticket tokens/users called SortitionSumTreeFactory which as explained in the overview video time 14:20-14:50 is used to capture users’ token balances in the leaves where internal nodes represent their sums...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•15 views

The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of DataTables libraries is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

9.8CVSS7.9AI score0.01407EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•21 views

The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the DataTables library is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.9AI score0.01407EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•23 views

The vulnerability of the bleach-based HTML cleaning library, which exists due to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the bleach HTML cleaning library exists because measures to protect the structure of web pages are not taken. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...

6.4CVSS7AI score0.00483EPSS
SaveExploits1References7Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•15 views

The vulnerability of the CentOS Web Panel application management application lies in its lack of protection for website structure elements, allowing attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the CentOS Web Panel administration application is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

6.1CVSS6.6AI score0.04751EPSS
SaveExploits6References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•17 views

The vulnerability in the plugin/Audit/Objects/AuditTable.php component of the YouPHPTube website allows attackers to execute arbitrary SQL queries.

The vulnerability of the plugin/Audit/Objects/AuditTable.php component of the YouPHPTube website is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

5.3CVSS6.3AI score0.02984EPSS
SaveExploits5References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•20 views

The vulnerability of the software for implementing the hypertext environment MediaWiki, which arises due to the lack of measures taken to protect the structure of web pages, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the software for implementing the hypertext environment MediaWiki exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality and integrity of...

6.1CVSS6.6AI score0.01301EPSS
SaveExploits1References7Affected Software4
Rows per page
Query Builder