5695 matches found
CVE-2017-15975
Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'productid' to addtocart.php, a different vulnerability than CVE-2008-4461...
CVE-2017-15975
Vastal I-Tech Dating Zone 0.9.9 is affected by a SQL Injection vulnerability exposed via the product_id parameter to add_to_cart.php. The issue allows attacker-supplied SQL commands and is documented across multiple sources (CNVD, CVE list, Exploit-DB, 0day exploit packs). The vulnerability is di...
CVE-2017-15975: Improper Neutralization of Special Elements used in an SQL Command
Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'productid' to addtocart.php, a different vulnerability than CVE-2008-4461...
PT-2017-14329
Name of the Vulnerable Software and Affected Versions Vastal I-Tech Dating Zone version 0.9.9 Description The issue allows SQL Injection via the product id variable in the "add to cart.php" endpoint. This enables potential attackers to inject malicious SQL code. Recommendations For version 0.9.9,...
OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)
Vulnerability in the Java SE, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...
OpenJDK: unbounded memory allocation in SimpleTimeZone deserialization (Serialization, 8181323)
Vulnerability in the Java SE, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...
CVE-2017-7145
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data...
CVE-2017-7145
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data...
Code injection
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data...
CVE-2017-7145
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data...
CVE-2017-7145
CVE-2017-7145 affects iOS before 11 in the Time component, specifically the Time Zone setting that may misuse location data. The Apple security content entry notes a permissions issue in the time zone handling process, addressed by modifying permissions. Connected references corroborate the issue...
PT-2017-17540
Name of the Vulnerable Software and Affected Versions iOS versions prior to 11 Description An issue was discovered in certain Apple products, involving the "Time" component. The issue is related to the "Setting Time Zone" feature, which mishandles the possibility of using location data...
Apple iOS Time has an unspecified vulnerability
Apple iOS is an operating system developed by Apple Inc. for mobile devices.Time component is one of the time components. A security vulnerability exists in the Time component of Apple iOS prior to version 11, which arises from the possibility that the program fails to properly handle the use of...
CVE-2017-7145: Undefined Security Weakness
An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Time" component. The "Setting Time Zone" feature mishandles the possibility of using location data...
CVE-2017-6224
Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x less than 10.0.1.0.17 MR1 release and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local...
CVE-2017-6224
Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x less than 10.0.1.0.17 MR1 release and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local...
CVE-2017-6223
Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating...
Command injection
Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x less than 10.0.1.0.17 MR1 release and Ruckus Wireless Unleashed AP Firmware releases 200.0.x, 200.1.x, 200.2.x, 200.3.x, 200.4.x. contain OS Command Injection vulnerabilities that could allow local...
Command injection
Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating...
CVE-2017-6223
Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection vulnerabilities in the ping functionality that could allow local authenticated users to execute arbitrary privileged commands on the underlying operating...