3 matches found
WeGIA 输入验证错误漏洞
WeGIA is a web manager for welfare organizations. WeGIA suffers from an open redirection vulnerability that stems from the control.php endpoint not handling target jumps appropriately, no detailed vulnerability details are provided at this time...
CVE-2022-0769
The Users Ultra WordPress plugin through 3.1.0 fails to properly sanitize and escape the datatarget parameter before it is being interpolated in an SQL statement and then executed via the ratingvote AJAX action available to both unauthenticated and authenticated users, leading to an SQL Injection...
OracleVM 3.4 : Unbreakable / etc (OVMSA-2018-0228) (Spectre)
The remote OracleVM system is missing necessary patches to address critical security updates : - netlink: add a start callback for starting a netlink dump Tom Herbert Orabug: 27169581 CVE-2017-16939 - ipsec: Fix aborted xfrm policy dump crash Herbert Xu Orabug: 27169581 CVE-2017-16939 - net/rds:...