Adobe Creative Cloud Desktop Application 代码问题漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit the vulnerability to...

EyesOfNetwork eonweb Arbitrary OS Command Execution Vulnerability

EyesOfNetwork "EON" is the open source and free IT monitoring solution that combines practical ITIL processes with a technical interface that allows its workday program. eonweb is the web interface for EyesOfNetwork. An arbitrary operating system command execution vulnerability exists in...

Linux kernel memory leak vulnerability (CNVD-2019-41712)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A memory disclosure vulnerability exists in the 'allocsgtable' function in the drivers/net/wireless/intel/iwlwifi/fw/dbg.c file in Linux kernel 5.3.11 and earlier...

UBUNTU-CVE-2019-19063

Two memory leaks in the rtlusbprobe function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service memory consumption, aka CID-3f9361695113...

Unspecified vulnerability in Linux kernel (CNVD-2019-38534)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the ieee802154create function in the net/ieee802154/socket.c file in the AFIEEE802154 network module in Linux kernel 5.3.2 and...

SQL injection vulnerability in the frontend of Queue Evaluation Integrated Management System V5.3 (CNVD-2019-41011)

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. SQL injection vulnerability exists in the frontend of Queue Evaluation Integrat...

PT-2019-5223 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions 3.7 through 5.3.0 Description: The issue is related to the wp targeted link rel function in WordPress, which can be exploited to result in a stored cross-site scripting XSS vulnerability. This vulnerability can be used by a...

Apple watchOS Messages has an unspecified vulnerability

Apple watchOS is an operating system for smartwatches from Apple Inc. Messages is an application component for sending text, photos and videos. A security vulnerability exists in the Messages component in Apple watchOS versions prior to 5.3. After being removed from an iMessage call, an attacker...

GNUBOARD5 Cross-Site Scripting Vulnerability (CNVD-2019-24211)

GNUBOARD5 is a Web forum system based on PHP and MySQL. A cross-site scripting vulnerability exists in GNUBOARD5 version 5.3.1.9. The vulnerability stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side...

MetInfo Cross-Site Request Forgery Vulnerability (CNVD-2019-14687)

MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A cross-site request forgery vulnerability exists in Metinfo version 5.3.18. The vulnerability stems from a WEB application that does not adequately validate whether a request is coming from a trusted...

GHSA-HJM9-576Q-399P Remote Code Execution in esigate-core

esigate.org esigate version 5.2 and earlier contains a CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in ESI directive with user specified XSLT that can result in Remote Code Execution. This attack appear to be exploitable vi...

CVE-2018-19340

Guriddo Form PHP 5.3 has XSS via the demos/jqform/defaultnodb/default.php OrderID, ShipName, ShipAddress, ShipCity, ShipPostalCode, ShipCountry, Freight, or details parameter...

Ivanti Avalanche Information Disclosure Vulnerability

Ivanti Avalanche is an enterprise mobile device management system from Ivanti, USA. The system is primarily used to manage devices such as smartphones, tablets and barcode scanners. A security vulnerability exists in Ivanti Avalanche versions 5.3 and 6.2. The vulnerability can be exploited by a...

CVE-2018-0136

A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router ASR 9000 Series could allow an unauthenticated, remote attacker to trigger a reload of one or more Trident-based line cards, resulting in a denial of service DoS condition. The...

Apache Traffic Server Remote Code Execution Vulnerability

Apache Traffic Server is the United States Apache Apache Software Foundation of an efficient , scalable HTTP proxy and caching server . A security vulnerability exists in the HTTP/2 experimental feature of Apache Traffic Server versions 5.3.x prior to 5.3.1. A remote attacker can exploit this...

UBUNTU-CVE-2015-5206

Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168...

Elasticsearch Kibana cross-site scripting vulnerability (CNVD-2017-11643)

Elasticsearch Kibana formerly known as elasticsearch-dashboard is a suite of open-source, browser-based analytics and search Elasticsearch dashboard tools from the Dutch company Elasticsearch. A cross-site scripting vulnerability exists in the Discover page in Elasticsearch Kibana versions 5.3 an...

Command Execution Vulnerability in Metinfo 5.3.10 CMS Latest Version

MetInfo is an enterprise website building software that supports multi-terminal display and is easy to use. A command execution vulnerability exists in the latest version of Metinfo 5.3.10 CMS, which can be exploited by attackers to execute arbitrary commands...