Moodle 安全漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle, which poses a remote code execution risk when restoring an incorrectly formatted backup file...

UBUNTU-CVE-2020-27802

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

UPX 安全漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which originates from an attacker being able to cause invalid memory address references to the adjABS function of its plxelf.cpp component via a carefully crafted Mach-O file...

UPX 安全漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which originates from an attacker being able to cause invalid memory address references to the elflookup function of its plxelf.cpp component via a carefully crafted Mach-O file...

CVE-2022-29704

BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability...

CVE-2022-29704

BrowsBox CMS v4.0 was discovered to contain a SQL injection vulnerability...

BrowsBox CMS SQL注入漏洞

BrowsBox CMS is a content management system from BrowsBox Belgium. v4.0 of BrowsBox CMS is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

CVE-2021-39023

IBM Guardium Data Encryption GDE 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 213860...

PT-2022-4846 · D Link · D-Link Dir-2150

Name of the Vulnerable Software and Affected Versions: D-Link DIR-2150 version 4.0.1 Description: This issue allows network-adjacent attackers to execute arbitrary commands on affected installations of D-Link DIR-2150 routers. Authentication is not required to exploit this issue. The specific fla...

CVE-2022-25012

Argus Surveillance DVR v4.0 employs weak password encryption...

CVE-2022-25012

Argus Surveillance DVR v4.0 employs weak password encryption...

PT-2022-16827 · Unknown · Fluture-Node

Name of the Vulnerable Software and Affected Versions: Fluture-Node versions 4.0.0 through 4.0.1 Description: Using followRedirects or followRedirectsWith with any of the redirection strategies built into Fluture-Node, paired with a request that includes confidential headers such as Authorization...

CVE-2022-23389

PublicCMS v4.0 was discovered to contain a remote code execution RCE vulnerability via the cmdarray parameter...

CVE-2022-23389

PublicCMS v4.0 was discovered to contain a remote code execution RCE vulnerability via the cmdarray parameter...

CVE-2022-24263

Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter...

UBUNTU-CVE-2021-46088

Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution RCE. Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user...

CVE-2021-44120

SPIP 4.0.0 is affected by a Cross Site Scripting XSS vulnerability in ecrire/public/interfaces.php, adding the function safehtml to the vulnerable fields. An editor is able to modify his personal information. If the editor has an article written and available, when a user goes to the public site...

CVE-2021-44122

SPIP 4.0.0 is affected by a Cross Site Request Forgery CSRF vulnerability in ecrire/public/aiguiller.php, ecrire/public/balises.php, ecrire/balise/formulaire.php. To exploit the vulnerability, a visitor must visit a malicious website which redirects to the SPIP website. It is also possible to...

DEBIAN-CVE-2021-44122

SPIP 4.0.0 is affected by a Cross Site Request Forgery CSRF vulnerability in ecrire/public/aiguiller.php, ecrire/public/balises.php, ecrire/balise/formulaire.php. To exploit the vulnerability, a visitor must visit a malicious website which redirects to the SPIP website. It is also possible to...

ch.mobi.mobitor:mobitor-base (>=3.1.242 <=3.1.295), cloud.piranha.session:piranha-session-hazelcast (>=20.5.0 <=20.11.0) +84 more potentially affected by unknown CVE via com.hazelcast:hazelcast (>=4.0.1 <=4.0.4)

com.hazelcast:hazelcast MAVEN version =4.0.1, =3.1.242, =20.5.0, =3.1.1, =3.1.1, =0.4.0, =0.1.1, =6.0.1, =1.0.2, =4.1, =4.0.1, =2.1.0, =2.1.0, =2.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-V57X-GXFJ-484Q...