CVE-2016-9888

An error within the "tardirectoryforfile" function gsf-infile-tar.c in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file...

CVE-2016-9888

The CVE-2016-9888 vulnerability affects GNOME Structured File Library (libgsf) before 1.14.41. The issue arises in tar_directory_for_file() within gsf-infile-tar.c, where a crafted TAR file can trigger a NULL pointer dereference, leading to a crash. Multiple connected advisories confirm the affec...

CVE-2016-9888

An error within the "tardirectoryforfile" function gsf-infile-tar.c in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file...

CVE-2016-9888

An error within the "tardirectoryforfile" function gsf-infile-tar.c in GNOME Structured File Library before 1.14.41 can be exploited to trigger a Null pointer dereference and subsequently cause a crash via a crafted TAR file...

Dell SonicWALL Universal Management Suite SQL Injection Vulnerability

Dell SonicWALL Universal Management Suite is a product of Dell, Inc. Dell SonicWALL Analyzer provides a comprehensive view of the network with comprehensive reports on bandwidth, threats and application traffic analysis. Dell SonicWALL Global Management System GMS is easily replaced, updated or...

Luis Bernardo SQL Injection Vulnerability

Luis Bernard is a web application development framework. A SQL injection vulnerability exists in the idplayer parameter of the formseeplayer.php page of the Luis Bernard system. Because the program fails to adequately filter user-submitted input, an attacker could use this vulnerability to take...

PT-2016-7862 · Gnome +2 · Gnome Structured File Library +2

Name of the Vulnerable Software and Affected Versions: GNOME Structured File Library versions prior to 1.14.41 Description: The issue is related to an error within the tar directory for file function in the gsf-infile-tar.c file, which can be exploited to trigger a Null pointer dereference, causi...

SQL Injection Vulnerability in LMID Parameter of United Technologies Healthcare System

Lianzhong Technology Medical System is a medical and health system application software of Zhejiang Lianzhong Intelligence Technology Co. A SQL injection vulnerability exists in the LMID parameter of the Lianzhong Technology Medical System, as the program fails to properly filter the LMID...

Lepton Add_droplets Parameter SQL Injection Vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. A SQL injection vulnerability exists in the Lepton Adddroplets parameter, which could be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying...

MyBB has multiple vulnerabilities (CNVD-2016-11606)

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. Multiple security vulnerabilities exist in versions of MyBB prior to 1.8.7, including: SQL injecti...

pycsw SQL Injection Vulnerability

pycsw is a system written in python that implements OGC CSW server functionality. It runs on all major platforms Windows, Linux, Mac OS X. Pycsw suffers from a SQL injection vulnerability, which can be exploited by an attacker to take control of the application, access or modify data, or exploit...

TYPO3 TC Directmail SQL Injection Vulnerability

TYPO3 is a free and open source content management system maintained by the Swiss TYPO3 Association. A SQL injection vulnerability exists in TYPO3 TC Directmail. The vulnerability is caused due to the program failing to properly filter user-supplied input, allowing an attacker to exploit the...

SQL Injection Vulnerability in NetDoit of Acuity Brands Creative Marketing Ltd.

NetDoit is a small CMS system developed by php+mysql. The product newsdetail.php?id= exists SQL injection vulnerability, the injection parameter is id, the attacker can use the vulnerability to obtain database sensitive information...

Ufo UFO-UAPWS suffers from SQL error reporting injection vulnerability (CNVD-2016-10771)

Ufo UFO-UAPWS Reporting System is an Internet solution for enterprises. A SQL reporting error injection vulnerability exists in UFIDA UFO-UAPWS. An attacker exploiting the vulnerability can view sensitive information, obtain database information, and cause information leakage...

Exponent CMS 'title' Parameter SQL Injection Vulnerability

Exponent CMS is a free, open source PHP-based modular content management system CMS of the U.S. OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. Exponent CMS version 2.3.9 suffers from a...

SAP Adaptive Server Enterprise SQL Injection Vulnerability

SAP Adaptive Server Enterprise ASE is a high-performance relational database management system of Germany SAP SAP. A SQL injection vulnerability exists in SAP ASE 16.0 SP02 PL03 and earlier versions. An attacker can exploit this vulnerability to gain system administrator privileges via dbcc...

SQL Injection Vulnerability in Type Parameters of Penta Digital Campus System

Penta Digital Campus System is using the technology platform of .NET+SqlServer. A SQL injection vulnerability exists in the /Student/xsxk/MessageView.aspx page of the Penda Digital Campus System. The lack of filtering of the 'type' parameter allows an attacker to exploit the vulnerability to obta...

SQL Injection Vulnerability in Digital China Internet Behavior Management System Announcement Parameters

Digital China Internet Behavior Management System is an Internet behavior logging system that fully owns the network behavior analysis management system, integrating hardware and software architecture, behavior analysis engine, management and control policies, analyzing network activities in real...

SQL Injection Vulnerability in Netqi CMS Web Management System 6.0

Netqi CMS website management system is a set of CMS system developed by Netqi, this system is developed using ASP.NET kernel. The system's ip/ajax.apsx page has an SQL injection vulnerability that allows arbitrary users to obtain database information...

CVE-2016-6443

A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability. More Information:...