SQL Injection Vulnerability in CmsEasy of Siping Jiuzhou Yitong Technology Co. Ltd (CNVD-2021-40740)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Apple Safari 跨站脚本漏洞

Apple Safari is a web browser from Apple, Inc. and is the default browser that comes with Mac OS X and iOS operating systems. A cross-site scripting vulnerability exists in Apple Safari. The vulnerability stems from the fact that processing maliciously crafted web content may result in cross-site...

Exploit for Use After Free in Microsoft

CVE-2021-31166 is a remote code execution vulnerability in the HTTP protocol stack. It is a use-after-free dereference bug in the http!UlpParseContentCoding function. The bug occurs when the function appends items to a local list and then moves it into the Request structure without NULLing out th...

python: Unsafe use of eval() on data retrieved via HTTP in the test suite

In Python3's Lib/test/multibytecodecsupport.py CJK codec tests call eval on content retrieved via HTTP...

webkitgtk: Memory initialization issue possibly leading to memory disclosure

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tvOS 14.5. Processing maliciously crafted web content may result in the disclosure of process memory...

webkitgtk: Input validation issue leading to cross site scripting attack

An input validation issue was addressed with improved input validation. This issue is fixed in iTunes 12.11.3 for Windows, iCloud for Windows 12.3, macOS Big Sur 11.3, Safari 14.1, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may lead to a cross sit...

Extreme CMS suffers from a code execution vulnerability (CNVD-2021-39004)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a code execution vulnerability that can be exploited by attackers to execute arbitrary code...

File Upload Vulnerability in JTBC Web Content Management System (PHP) at Shanghai SevenWise Network Technology Co.

JTBC Web Content Management System PHP is a website system that can expand and clone existing modules. Ltd. JTBC Web Content Management System PHP has a file upload vulnerability that can be exploited by attackers to gain control of the server...

XSS vulnerability in Extreme CMS (CNVD-2021-36489)

Extreme CMS is an open source PHPCMS web content management system. Extreme CMS has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

USN-4939-1: WebKitGTK vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

Command Execution Vulnerability in CmsEasy Backend

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. A command execution vulnerability exists in the CmsEasy backend. An attacker can exploit the vulnerability to gain server privileges...

CmsEasy suffers from SQL injection vulnerability (CNVD-2021-35531)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-35880)

Extreme CMS is an open source and free CMS web content management system in PHP language. Extreme CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information in the database...

CmsEasy suffers from SQL injection vulnerability (CNVD-2021-35527)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...

Apple tvOS 缓冲区错误漏洞

Apple iOS and others are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Apple watchOS is a smart watch operating system. A buffer error vulnerability exists in multiple...

About the security content of Safari 14.1

About the security content of Safari 14.1 This document describes the security content of Safari 14.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

VulnCheck KEV: CVE-2021-30665

Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products...

About the security content of iOS 12.5.3

About the security content of iOS 12.5.3 This document describes the security content of iOS 12.5.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

VulnCheck KEV: CVE-2021-30666

Apple iOS WebKit contains a buffer-overflow vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML...

PT-2021-4452 · Apple +8 · Macos Big Sur +13

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.5.1 iPadOS versions prior to 14.5.1 tvOS versions prior to 14.6 iOS versions prior to 12.5.3 Safari versions prior to 14.1.1 macOS Big Sur versions prior to 11.3.1 Description: An integer overflow issue was addressed...