PT-2022-23576 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the Section parameter at the "/librarian/lab.php" API endpoint. Recommendations: For Library...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

PT-2022-2378 · Unknown +3 · Networkd-Dispatcher +3

Name of the Vulnerable Software and Affected Versions: networkd-dispatcher affected versions not specified Description: A flaw exists in networkd-dispatcher due to the lack of sanitization of functions by the OperationalState or the AdministrativeState, leading to a directory traversal attack. Th...

InHand Networks InRouter 900 跨站脚本漏洞

The InHand Networks InRouter 900 is a series of industrial routers from InHand Networks, U.S.A. The InHand Networks InRouter 900 Industrial 4G Router has a cross-site scripting vulnerability, for which no details of the vulnerability are currently available...

PT-2022-18389 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability. This is possible through the "/public html/apply vacancy" API...

QingScan 跨站脚本漏洞

QingScan is a batch vulnerability mining tool by a Chinese daxia individual developer. It is used to glue various good scanners. There is a security vulnerability in QingScan 1.3.0, there is no information about the vulnerability at the moment, please feel free to pay attention to CNNVD or vendor...

PT-2021-23930 · Unknown · @Backstage/Plugin-Scaffolder-Backend

Name of the Vulnerable Software and Affected Versions: @backstage/plugin-scaffolder-backend versions prior to 0.15.14 Description: A malicious actor with write access to a registered scaffolder template can manipulate the template to write files to arbitrary paths on the scaffolder-backend host...

Red Hat 3scale API Management Platform 输入验证错误漏洞

Red Hat 3scale API Management Platform is an API management infrastructure platform from Red Hat. It enables rapid API sharing, protection, distribution, control, and monetization. Red Hat 3scale API Management Platform has an input validation error vulnerability vulnerability, there is currently...

PT-2021-22048 · Unknown · Integria Ims

Name of the Vulnerable Software and Affected Versions: Integria IMS affected versions not specified Description: The login check in Integria IMS uses a loose comparator to compare the MD5 hash of the user-provided password and the MD5 hash stored in the database. This allows an attacker with a...

Vulnerabilities fixed in GitLab CE and EE

GitLab has fixed two vulnerabilities in GitLab Community Edition and Enterprise Edition. The vulnerabilities could be exploited by a malicious person with rights to upload files could be exploited to execute arbitrary code with permissions from the GitLab Service. A CVE ID is not yet known for on...

Google Android Pixel Security Flaw

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android Pixel has a security vulnerability, there is currently no information about this vulnerability, please stay tuned to CNNVD or the manufacturer's announcement...

Unspecified Vulnerability in Oracle Fusion Middleware BI Publisher Layout Templates Component

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's Oracle business innovation platform for enterprise and cloud environments. The platform provides middleware, software collection and other functions. BI Publisher formerly known as XML Publisher is one of the reporting...

Unknown Vulnerability in Unbound

Unbound is a DNS resolver from the NLnet Labs Foundation in the Netherlands that supports verified recursion and caching. An unspecified vulnerability exists in Unbound. An attacker can exploit this vulnerability to cause an infinite loop with a specially crafted DNS response...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-30600)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Samsung mobile devices have a security vulnerability that can be exploited by attackers to compromise integrity...

VulnCheck KEV: CVE-2020-8515

DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution...

Unspecified Vulnerability in Meetecho Janus (CNVD-2020-19849)

Meetecho Janus is a WebRTC Web Real Time Communication server from Meetecho. Meetecho Janus has a security vulnerability, and no details of the vulnerability are provided at this time...

DEBIAN-CVE-2018-1000833

ZoneMinder version = 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...

Cloud Foundry UAA has an unspecified vulnerability (CNVD-2019-43846)

Cloud Foundry UAA is an authentication and managed service endpoint for the Cloud Foundry cloud platform from the Cloud Foundry Foundation. A security vulnerability exists in Cloud Foundry UAA. An attacker could exploit the vulnerability to obtain account tokens with the same username...

Unspecified Vulnerability in Phusion Passenger

Phusion Passenger is an Apache module for deploying Ruby on Rails projects on Apache and Nginx web servers from Phusion Netherlands. A security vulnerability exists in the 'switchGroup' function in the agent/ExecHelper/ExecHelperMain.cpp file in Phusion Passenger, which stems from the program...

Unspecified Vulnerability in Oracle Hospitality Suite 8 (CNVD-2017-30886)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hospitality management from Oracle Corporation.Hospitality Suite8 is one of the advanced customer management components. An unspecified vulnerability exists in the Leisure component of Oracle...