Joomla! component com_newsfeeds 'feedid' SQL injection vulnerability

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A SQL injection vulnerability exists in the Joomla! component comnewsfeeds 'feedid'. An attacker can exploit this vulnerability to execute illegal SQL commands...

SOPlanning SQL Injection Vulnerability

SOPlanning is an online planning tool. A SQL injection vulnerability exists in SOPlanning version 1.45. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to execute illegal SQL commands...

Joomla! SQL Injection Vulnerability (CNVD-2020-12711)

Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A SQL injection vulnerability exists in Joomla! versions prior to 3.9.14, which stems from a lack of validation of externally-entered SQL statements...

ASUS ASUS_X00K_1 Access Control Error Vulnerability

The ASUS ZenFone 3 Ultra is a smartphone from Asus ASUS of Taiwan, China. Asus ZenFone 3 Ultra build fingerprint: asus/WWPhone/ASUSA001:7.0/NRD90M/14.1010.1804.75-20180612: user/release-keys in the com.asus. An access control error vulnerability exists in the loguploaderproxy app. The vulnerabili...

Intesync Solismed SQL Injection Vulnerability

Intesync Solismed is a clinic management system designed for use by independent and free clinics. Intesync Solismed suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to execute illegal SQL commands...

CVE-2019-12392

Anviz access control devices allow remote attackers to issue commands without a password...

Unspecified Vulnerability in ASUS ASUS_X00K_1

The ASUS ASUSX00K1 is a smartphone from Asus ASUS of Taiwan, China. Asus ASUSX00K1 build fingerprint: asus/CNX00K/ASUSX00K1:7.0/NRD90M/CNX00K-14.01.1711.27-20180420:user/release-keys has a security vulnerability in the com. A security vulnerability exists in the lovelyfont.defcontainer app. An...

Pimcore SQL Injection Vulnerability (CNVD-2019-42564)

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce framework and product information management applications. A SQL injection vulnerability exists in version...

ESET Cyber Security for macOS Input Validation Error Vulnerability

ESET Cyber Security for macOS is a suite of Internet security protection software for the macOS platform from ESET Slovakia. A security vulnerability exists in ESET Cyber Security version 6.7.900.0 for macOS-based platforms. A local attacker can exploit the vulnerability to execute unauthorized...

Tooonyy dormsystem SQL Injection Vulnerability

Tooonyy dormsystem is a dormitory information management system. A SQL injection vulnerability exists in the admin.php file in versions 1.3 and earlier of Tooonyy dormsystem, which stems from a lack of validation of externally-entered SQL statements in database-based applications and can be...

CVE-2019-16519

ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks...

Design/Logic Flaw

ESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in scheduled tasks...

CVE-2019-16519

CVE-2019-16519 affects ESET Cyber Security 6.7.900.0 for macOS. The vulnerability arises from abusing an undocumented feature in scheduled tasks, enabling a local attacker to execute unauthorized commands as root. The description is repeated across NVD and multiple vendor/ national vulnerability ...

Remote code execution

Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, which may allow an attacker to perform remote code execution...

CVE-2019-10969

Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, which may allow an attacker to perform remote code execution...

Cisco IOS XE Consent Token Bypass Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. A consent token bypass vulnerability exists in the CLI of Cisco IOS XE. The vulnerability stems from insufficient enforcement of consent tokens in authorized Shell access. An attacker could exploit this...

Cisco IOS XE ASIC Register Write Vulnerability

Cisco IOS XE is a set of operating systems developed by Cisco for its network devices. An ASIC register write vulnerability exists in the CLI of Cisco IOS XE. The vulnerability stems from improper input validation and authorization of specific commands that a user can execute in the CLI. An...

ClonOS WEB control panel SQL Injection Vulnerability

ClonOS is an open source platform based on FreeBSD. The platform is mainly used for the creation and management of virtual environments. web control panel is one of the web-based ClonOS control panel. An SQL injection vulnerability exists in the clonos.php file in versions of WEB control panel...

WordPress cforms2 plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. cforms2 is a form builder plugin used in it. A SQL injection vulnerability exists in the WordPress cforms2 plugin. An attacker can...

D-Link DIR-823G Command Injection Vulnerability (CNVD-2019-30427)

The D-Link DIR-823G is a wireless router from AUO D-Link of Taiwan, China. A command injection vulnerability exists in the D-Link DIR-823G. The vulnerability stems from a failure of a network system or product to properly filter specific elements of externally input data during the construction o...