53 matches found
qimengcms has a logic flaw vulnerability
qimengcms is a content management system. A logic flaw vulnerability exists in qimengcms, which can be exploited by an attacker to compromise the integrity of the system...
PT-2021-13833 · Red Hat · Keycloak
Name of the Vulnerable Software and Affected Versions: keycloak versions prior to 13.0.0 Description: A flaw in keycloak allows for a Self Stored XSS attack vector, which can escalate to a complete account takeover. This is due to user-supplied data fields not being properly encoded and the use o...
Denial Of Service (DoS)
tensorflow is vulnerable to denial of service. A heap underflow occurs because invalid values for axis argument are accepted in tf.rawops.QuantizeAndDequantizeV2, allowing an attacker to read/write to other data on the heap...
DzzOffice Cross-Site Scripting Vulnerability
Dzzoffice is a set of open source office suite for enterprises, teams to build their own similar to the "Google Apps Suite", "Microsoft Office365" enterprise collaboration platform. A cross-site scripting vulnerability exists in attach/ajax.php in DzzOffice 2.02.1 and earlier versions. The...
Prototype Pollution
bmoor is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype via the set function...
Denial of service
Publify before 8.0.1 is vulnerable to a Denial of Service attack...
Directory Traversal
servewuqianqianqian is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of ../ sanitization on the user input, allowing attackers to access files outside of the server's scope...
About Apache Struts 2 S2-0 3 2 vulnerability threat monitoring and emergency disposal of the case Bulletin-vulnerability warning-the black bar safety net
4 the end of the month, the Apache struts2 S2-0 3 2 remote code execution vulnerability CNVD-2 0 1 6-0 2 5 0 6, The CVE-2 0 1 6-3 0 8 1, hereinafter referred to as S2-0 3 2 vulnerability, the exploit code is disclosed and in a short time spread rapidly. CNVD Secretariat-National Internet emergenc...
Microsoft Windows Media Player DVR-MS Files Code Execution (MS11-015; CVE-2011-0042)
DVR-MS Microsoft Digital Video Recording is a proprietary video and audio file container format, developed by Microsoft used for storing TV content recorded by Windows XP Media Center Edition, Windows Vista and Windows 7. A remote code execution vulnerability has been reported in the way Windows...
CVE-2008-4868
Unspecified vulnerability in the avcodecclose function in libavcodec/utils.c in FFmpeg 0.4.9 before r14787, as used by MPlayer, has unknown impact and attack vectors, related to a free "on random pointers."...
USN-524-1: OpenOffice.org vulnerability
An integer overflow was discovered in the TIFF handling code in OpenOffice. If a user were tricked into loading a malicious TIFF image, a remote attacker could execute arbitrary code with user privileges...
anaconda clipper 3.3 - Directory Traversal
anaconda clipper 3.3 - Directory Traversal source: https://www.securityfocus.com/bid/2512/info Clipper is a headline-gathering tool from Anaconda! Partners which, in certain versions, is vulnerable to directory traversal attacks. By including '/../' sequences in requested URLs, an attacker can...
