255 matches found
Heartland OA 2021 Autumn Real Edition has a file upload vulnerability (CNVD-2021-88620)
HeartTone OA is a versatile and intelligent office application. Heart to Heart OA 2021 Autumn Real Edition has a file upload vulnerability, which can be exploited by attackers to gain control of the server...
MTN Group: SSRF Keycloak before 13.0.0 - CVE-2020-10770 on https://sponsoredata.mtn.ci
A flaw was found in Keycloak before 13.0.0, where it was possible to force the server to call out an unverified URL using the OIDC parameter requesturi. This flaw allowed an attacker to use this parameter to execute a Server-side request forgery SSRF attack...
Tecknodreams SapphireIMS Default Configuration Issue Vulnerability
Tecknodreams SapphireIMS is an ITIL 2011 certified enterprise class service management system from Tecknodreams India. A default configuration issue vulnerability exists in Tecknodreams SapphireIMS version 5.0, which stems from the use of default sapphire:ims credentials to connect clients to the...
OPENSUSE-SU-2021:2641-1 Security update for python-reportlab
This update for python-reportlab fixes the following issues: - CVE-2020-28463: Fixed Server-side Request Forgery via img tags bsc1182503...
Command Execution Vulnerability in HkCMS
HKCMS is an open source content management system developed on the basis of Thinkphp 5.0 framework, using an independent grouping approach. HkCMS suffers from a command execution vulnerability that can be exploited by attackers to gain control of the server...
Command execution vulnerability exists in Yii2 (CNVD-2021-40140)
Yii2 is a component-based PHP framework for rapid development of modern web applications. Yii2 suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...
Command Execution Vulnerability in DHCMS (CNVD-2021-37325)
DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...
Command execution vulnerability in DHCMS (CNVD-2021-37336)
DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...
Command Execution Vulnerability in RG-RAC200b
The RG-RAC200b is a wireless controller. A command execution vulnerability exists in the RG-RAC200b that can be exploited by an attacker to gain server control privileges...
Command Execution Vulnerability in NS-NGFW Next Generation Firewall of Beijing Netcom Technology Co.
NS-NGFW is a high-performance application layer firewall that can comprehensively deal with network threats. A command execution vulnerability exists in NS-NGFW, which can be exploited by an attacker to gain server control privileges...
MetInfo suffers from a command execution vulnerability (CNVD-2021-30098)
MetInfo is a free and open source enterprise CMS. MetInfo suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...
EasyBuilder Pro suffers from a dll hijacking vulnerability (CNVD-2021-05668)
EasyBuilder Pro is a HMI software developed by Wyland. EasyBuilder Pro suffers from a dll hijacking vulnerability, which can be exploited by attackers to gain server control privileges...
FasterXML jackson-databind suffers from a command execution vulnerability (CNVD-2021-01852)
FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . A command execution vulnerability exists in FasterXML jackson-databind, which can be exploited by an attacker to gain server control privileges...
Command execution vulnerability in PbootCMS (CNVD-2021-00794)
PbootCMS is an open source free PHP enterprise web development and construction management system. PbootCMS has a command execution vulnerability that can be exploited by attackers to gain server privileges...
YoudianCMS suffers from a file upload vulnerability (CNVD-2020-70582)
YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS file upload vulnerability, attackers can use the vulnerability to obtain server contro...
Nextcloud Server Server-Side Encryption Keys Insufficiently Protected Vulnerability
Nextcloud is a set of client-server software for creating file hosting services and using them. Nextcloud Server 19.0.1 suffers from an insufficiently protected server-side encryption key vulnerability. An attacker could exploit the vulnerability by replacing the encryption key...
CVE-2020-12128
DONG JOO CHO File Transfer iFamily 2.1 allows directory traversal related to the ./etc/ path...
CVE-2020-8794
OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mtaio in mtasession.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTPD, it is possible to attack a server because the server code launches the client code during bounce...
