13088 matches found
SQL Injection Vulnerability in e-cology 9 of Shanghai Panmicro Network Technology Co.
e-cology 9 is a large-scale collaborative management platform for enterprises. A SQL injection vulnerability exists in e-cology 9 of Shanghai Panmicro Network Technology Co. Under default configuration, an unauthorized attacker can exploit this vulnerability to execute arbitrary SQL statements,...
CVE-2024-40535
Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 was discovered to contain a stack overflow via the apnname3g parameter in the config3gpara function...
CVE-2024-40536
Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 were discovered to contain a stack overflow via the pin3gcode parameter in the config3gpara function...
CVE-2024-40536
Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 were discovered to contain a stack overflow via the pin3gcode parameter in the config3gpara function...
CVE-2024-40425
File Upload vulnerability in Nanjin Xingyuantu Technology Co Sparkshop Spark Mall B2C Mall v.1.1.6 and before allows a remote attacker to execute arbitrary code via the contorller/common.php component...
Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affect IBM Storage Protect Server and Operations Center (CVE-2023-22081, CVE-2023-22067, CVE-2023-5676)
Summary Multiple vulnerabilities CVE-2023-22081, CVE-2023-22067, CVE-2023-5676 exist in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Storage Protect Server and IBM Storage Protect Operations Center. Vulnerability Details CVEID:CVE-2023-22081 DESCRIPTION: An unspecified...
CVE-2024-6742
AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and perform Reflected Cross-site scripting attacks...
CVE-2024-6742
CVE-2024-6742 affects AguardNet Technology’s Space Management System. The vulnerability is a reflected Cross-Site Scripting (XSS) flaw caused by improper input filtering of user-supplied data, enabling remote attackers with regular privileges to inject JavaScript. The available sources describe t...
CVE-2024-6742 AguardNet Space Management System - Reflected Cross-Site Scripting
AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and perform Reflected Cross-site scripting attacks...
CVE-2024-6737
The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implemented, allowing remote attackers with regular privileges to access the account settings functionality and create an administrator account...
CVE-2024-6737 2100 TECHNOLOGY Electronic Official Document Management System - Broken Access Control
The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implemented, allowing remote attackers with regular privileges to access the account settings functionality and create an administrator account...
CVE-2024-6737 2100 TECHNOLOGY Electronic Official Document Management System - Broken Access Control
The access control in the Electronic Official Document Management System from 2100 TECHNOLOGY is not properly implemented, allowing remote attackers with regular privileges to access the account settings functionality and create an administrator account...
Denial-of-service vulnerability in Vastbase G100 database of Beijing Massive Data Technology Co. Ltd (CNVD-2024-35508)
Founded in 2007, Beijing Massive Data Technology Co., Ltd. is a leading data technology company in China. Specialized in database product development, sales and service, after years of independent research and development, it has released Vastbase E100 database and Vastbase G100 database. A...
CVE-2024-6730
A vulnerability was found in Nanjing Xingyuantu Technology SparkShop up to 1.1.6. It has been rated as critical. This issue affects some unknown processing of the file /api/Common/uploadFile. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely...
CVE-2024-6730
CVE-2024-6730 affects Nanjing Xingyuantu Technology SparkShop (versions up to 1.1.6). The issue is an unrestricted file upload via the /api/Common/uploadFile endpoint, caused by manipulation of the file argument. This vulnerability can be triggered remotely and has been publicly disclosed. Practi...
CVE-2024-6730 Nanjing Xingyuantu Technology SparkShop uploadFile unrestricted upload
A vulnerability was found in Nanjing Xingyuantu Technology SparkShop up to 1.1.6. It has been rated as critical. This issue affects some unknown processing of the file /api/Common/uploadFile. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely...
CVE-2024-6730 Nanjing Xingyuantu Technology SparkShop uploadFile unrestricted upload
A vulnerability was found in Nanjing Xingyuantu Technology SparkShop up to 1.1.6. It has been rated as critical. This issue affects some unknown processing of the file /api/Common/uploadFile. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely...
Command Execution Vulnerability in YonBIP of UFIDA Network Technology Corporation (CNVD-2024-34828)
YonBIP is a converged service group with the basic product form of digital intelligence platform + scene services in ten fields + large-scale ecology. A command execution vulnerability exists in YonBIP of UFIDA Network Technology Corporation, which can be exploited by an attacker to execute...
Relating IntelliCache and In-memory Read Caching
Introduced in XenServer 5.6 SP1, IntelliCache is designed to reduce the volume of storage I/O hitting the network and the storage repository SR shared with other hosts. Introduced in XenServer 6.5, in-memory read-caching is designed to reduce the volume of storage I/O hitting an SR and reduce I/O...
