1099 matches found
Piwigo SQL注入漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo Piwigo-Guest-Book version 1.3.0 and earlier versions suffer from a SQL injection vulnerability that stems from incorrect...
WordPress Show-Hide / Collapse-Expand Plugin <= 1.2.5 is vulnerable to Broken Authentication
Software Show-Hide / Collapse-Expand Type Plugin Vulnerable versions = 1.2.5 Fixed in 1.3.0 OWASP Top 10 A5: Broken Access Control Classification Broken Authentication CVE N/A Patch priority High CVSS severity High 5.4 Developer Claim ownership PSID 11f0fb541e9a Credits N/A Required privilege...
PT-2023-15614 · Unknown · Ntpd Driver
Name of the Vulnerable Software and Affected Versions: ntpd driver component versions prior to 1.3.0 ntpd driver component 2.x versions prior to 2.2.0 Description: The issue allows attackers who control the source code of a different node in the same ROS application to change a robot's behavior...
ChurchInfo 代码问题漏洞
ChurchInfo is a free church database program from the ChurchInfo team that helps churches track members, families, groups, pledges, and payments. An arbitrary file upload vulnerability exists in ChurchInfo versions 1.2.13 and later, 1.3.0 and earlier. The vulnerability stems from the application'...
CVE-2022-34434
Cloud Mobility for Dell Storage versions 1.3.0 and earlier contains an Improper Access Control vulnerability within the Postgres database. A threat actor with root level access to either the vApp or containerized versions of Cloud Mobility may potentially exploit this vulnerability, leading to th...
Dell Container Storage Modules 操作系统命令注入漏洞
Dell Container Storage Modules are a set of modules from Dell, Inc. It is designed to provide additional functionality beyond what is available in container storage. An operating system command injection vulnerability exists in Dell Container Storage Modules versions 1.3.0 and later, prior to...
CVE-2022-36566
Rengine v1.3.0 was discovered to contain a command injection vulnerability via the scan engine function...
Rengine 操作系统命令注入漏洞
Rengine is an automated reconnaissance framework for gathering information during penetration testing of web applications. A security vulnerability exists in Rengine version v1.3.0, which stems from a command injection in its scan engine functionality...
PT-2022-23474 · Rengine · Rengine
Name of the Vulnerable Software and Affected Versions: Rengine version 1.3.0 Description: A command injection issue was found in the scan engine function. Recommendations: For Rengine version 1.3.0, consider disabling the scan engine function as a temporary workaround until a patch is available...
NodePDF 命令注入漏洞
NodePDF is a PDF rendering tool based on Node.js. A security vulnerability exists in NodePDF version 1.3.0, which stems from the fact that during PDF rendering, input passed to the Pdf function is escaped by the shell and passed to childprocess.exec. However, shell escaping does not correctly...
CVE-2021-33455
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in dodirective in modules/preprocs/nasm/nasm-pp.c...
CVE-2021-33468
An issue was discovered in yasm version 1.3.0. There is a use-after-free in error in modules/preprocs/nasm/nasm-pp.c...
CVE-2021-33463
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in yasmexprcopyexcept in libyasm/expr.c...
CVE-2021-33462
An issue was discovered in yasm version 1.3.0. There is a use-after-free in exprtraversenodespost in libyasm/expr.c...
DEBIAN-CVE-2021-33464
An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in incfopen in modules/preprocs/nasm/nasm-pp.c...
AZL-10332 CVE-2021-33462 affecting package yasm 1.3.0-17
An issue was discovered in yasm version 1.3.0. There is a use-after-free in exprtraversenodespost in libyasm/expr.c...
CVE-2021-33461
An issue was discovered in yasm version 1.3.0. There is a use-after-free in yasmintnumdestroy in libyasm/intnum.c...
CVE-2021-33455
An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in dodirective in modules/preprocs/nasm/nasm-pp.c...