7473 matches found
Extreme cms has SQL injection vulnerability
jizhicms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...
Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35729)
jizhicms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability , attackers can use the vulnerability to obtain database sensitive information...
Cross-site Scripting (XSS)
webkit2gtk:edge is vulnerable to cross-site scripting. An input validation issue was addressed with improved input validation. Processing maliciously crafted web content may lead to a cross site scripting attack...
Remote Code Execution (RCE)
webkit2gtk is vulnerable to remote code execution. The vulnerability exists due to a use after free issue which is processed from a crafted web content...
Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-34300)
Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
About the security content of iCloud for Windows 12.3
About the security content of iCloud for Windows 12.3 This document describes the security content of iCloud for Windows 12.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
VulnCheck KEV: CVE-2021-30661
Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit Storage contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and...
About the security content of Security Update 2021-003 Mojave
About the security content of Security Update 2021-003 Mojave This document describes the security content of Security Update 2021-003 Mojave. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurre...
Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-32379)
Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Extreme CMS suffers from SQL injection vulnerability
Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-32381)
Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-32380)
Extreme CMS is an open source web content management system developed by Langfang Extreme Network Technology Co. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Elevation of Privilege Vulnerability in Multiple Mozilla Products (CNVD-2021-49135)
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An elevation of privilege vulnerability exists in multiple Mozilla products,...
Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2021-36259)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a buffer overflow vulnerability that originates from a boundary error when processing web content. A remote attacker could exploit this vulnerability to execute arbitrary...
Mozilla Firefox 安全漏洞
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An elevation of privilege vulnerability exists in multiple Mozilla products,...
Mozilla Firefox 缓冲区错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a buffer overflow vulnerability that originates from a boundary error when processing web content. A remote attacker could exploit this vulnerability to execute arbitrary...
WCMS 跨站脚本漏洞
WCMS is a content management system CMS that uses an open web interface to build websites. A reflective cross-site scripting vulnerability exists in WCMS version 0.3.2. The vulnerability can be exploited to inject arbitrary web script and HTML via the type parameter of wex/cssjs.php...
Denial Of Service(DoS)
webkit2gtk is vulnerable to denial of service. A memory corruption happens due to processing of maliciously crafted web content, leading to an arbitrary code execution...
CVE-2021-1879
This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been...
DEBIAN-CVE-2021-1844
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 v. 14610.4.3.1.7 and 15610.4.3.1.7, watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution...