8118 matches found
CVE-2020-21060
PHPMyWind 5.6 is affected by a SQL injection vulnerability in the administrator management page’s delete function, allowing remote attackers with low privileges to gain elevated access. Root cause: improper input handling in the delete operation enables arbitrary SQL execution, leading to potenti...
CVE-2023-26776
CVE-2023-26776 affects Monitorr v1.7.6. It is a Cross Site Scripting vulnerability in the post_receiver-services.php title parameter that can let a remote attacker execute arbitrary code. The exploit details (PacketStorm) show how an attacker can craft a malicious title to run script code via the...
CVE-2020-20914
CVE-2020-20914 affects San Luan PublicCMS v4.0. The issue is a SQL Injection via the sql parameter that can lead to remote code execution. Documents show a high-impact, CRITICAL vulnerability (CVSS 3.1: 9.8) with network attack vector and no user interaction required. Exploitation details or live...
CVE-2023-27759
An issue found in Wondershare Technology Co, Ltd Edrawmind v.10.0.6 allows a remote attacker to executea arbitrary commands via the WindowsCodescs.dll file...
USN-5991-1: Linux kernel (GCP) vulnerabilities
It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2021-3669 It was discovered that a use-after-free vulnerability existed in the SGI GRU...
USN-5985-1 linux-aws-5.4, linux-azure-5.4, linux-gcp-5.4, linux-hwe-5.4, linux-ibm-5.4, linux-oracle-5.4, linux-raspi-5.4 vulnerabilities
It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2021-3669 It was discovered that the KVM VMX implementation in the Linux kernel did no...
USN-5980-1 linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-kvm, linux-oracle, linux-raspi vulnerabilities
It was discovered that the System V IPC implementation in the Linux kernel did not properly handle large shared memory counts. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2021-3669 It was discovered that the KVM VMX implementation in the Linux kernel did no...
CVE-2023-27842
CVE-2023-27842 details (Extplorer eXtplorer 2.1.15): Insecure Permissions vulnerability allows a remote attacker to execute arbitrary code via the index.php component. Affected software is Extplorer File Manager eXtplorer v2.1.15. Impact per cited metrics: High severity, CVSSv3.1– AV:N/AC:L/PR:L/...
The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows a attacker to trigger a Denial-of-Service Attack (DoS).
The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to carry out a DoS Denial-of-Service attack...
CVE-2023-27786
An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function...
CVE-2023-27784
An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the readhexstring function at the utils.c:309 endpoint...
CVE-2023-27130
Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an arbitrarily supplied URL parameter...
Buffer overflow
Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the loulogFile function at logginc.c endpoint...
Information disclosure
An issue found in DepositGame v.1.0 allows an attacker to gain sensitive information via the GetBonusWithdraw and withdraw functions...
CVE-2023-27788
An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint...
Sql injection
SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank parameter in the /dedestorycatalog.php endpoint...
Design/Logic Flaw
An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the readhexstring function at the utils.c:309 endpoint...
Design/Logic Flaw
An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserController...