Jenkins SSH Plugin Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.Jenkins SSH Plugin 2.6.1 and earlier...

Command Execution Vulnerability in Apache CouchDB

Apache CouchDB is the United States Apache Apache Foundation's use of Erlang development of a document-oriented database system. Apache CouchDB suffers from a command execution vulnerability that can be exploited by an attacker to gain administrator privileges...

WordPress Code Snippets Extended Cross-Site Request Forgery Vulnerability (CNVD-2022-49396)

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Code Snippets Extended is vulnerable to cross-site request forgery, which can be exploited by...

Oracle WebLogic Server Input Validation Error Vulnerability (CNVD-2022-05874)

Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and...

Cisco Data Center Network Manager REST API SQL Injection Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A REST API SQL injection vulnerability exists in Cisco Data Center Network Manager...

Jenkins Autocomplete Parameter Plugin跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. The vulnerability stems from the program not properly escaping the names of th...

WordPress WP HTML Mail plugin cross-site scripting vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress WP HTML Mail plugin in version 3.0.9 and earlier is vulnerable to a cross-site scripting vulnerability tha...

Apache HTTP Server Cross-Site Request Forgery Vulnerability

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A cross-site request forgery vulnerability exists in Apache HTTP Server, which can be exploited by an attacker to cause NTLM hash...

D-Link DAR-7000 mailrecvview.php File SQL Injection Vulnerability

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A SQL injection vulnerability exists in the D-Link DAR-7000 mailrecvview.php file, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Google Android elevation of privilege vulnerability (CNVD-2023-41882)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a missing privilege check in the retrieveAppEntry of NotificationAccessDetails.java, which can be exploited by an attacker to elevate privileges...

Moodle Input Validation Error Vulnerability (CNVD-2022-54911)

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. moodle suffers from an input validation error vulnerability, which stems from improper input validation and can be exploited by remote...

Jenkins EasyQA Plugin Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plug-ins to support building, deploying, and automating any project. Jenkins EasyQA Plugin 1.0 and earlier versions are vulnerable to cross-site...

Google Pixel Input Validation Error Vulnerability (CNVD-2023-65159)

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an input validation error vulnerability that stems from a failure to properly validate user input in GeoLocation.java, which can be exploited by an attacker to elevate local privileges...

AngularJS Cross-Site Scripting Vulnerability (CNVD-2020-53539)

AngularJS is a TypeScript-based open source web application framework. A cross-site scripting vulnerability exists in angular.js versions prior to 1.8.0. The vulnerability stems from the lack of proper validation of client-side data in the WEB application. An attacker can exploit the vulnerabilit...

Panmicro ecology9 SQL Injection Vulnerability

Ecology9 is a new and efficient collaborative office system created by Panmicro for medium and large organizations. There is a SQL injection vulnerability in Panmicro ecology9, which can be exploited by attackers to obtain sensitive database information...

Fast Food Ordering System Arbitrary File Deletion Vulnerability

Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to an arbitrary file deletion vulnerability, which originates in /ffos/classes/Master.php?f=deleteimg page lacks valid validation and can be...

Adobe Illustrator out-of-bounds read vulnerability

Adobe Illustrator is a vector-based image creation software from Adobe, Inc. An out-of-bounds read vulnerability exists in Adobe Illustrator, which could be exploited to trick victims into opening a carefully constructed file, triggering an out-of-bounds read error and reading the contents of...

Blackmagic Design DaVinci Resolve Code Execution Vulnerability

Blackmagic Design DaVinci Resolve is an all-in-one software tool for editing, color correction, visual effects, motion graphics and audio post-production.A code execution vulnerability exists in Blackmagic Design DaVinci Resolve, which could be exploited by attackers to execute arbitrary code in...

Apache HTTP Server Code Execution Vulnerability (CNVD-2025-30835)

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. A code execution vulnerability exists in Apache HTTP Server versions 2.4.7 through 2.4.65, which can be exploited by an attacker t...

FreeImage LoadRGB function buffer overflow vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A buffer overflow vulnerability exists in the FreeImage LoadRGB function, which originates from a boundary error in the LoadRGB function of the PluginDDS.cpp file when handling untrusted input. An...

Bento4 Ap4File.cpp Denial of Service Vulnerability

Bento4 is an open source C++ library for reading and writing MP4 files. A denial of service vulnerability exists in Bento4 version 1.6.0-639, which stems from a null pointer dereference in AP4File::ParseStream in Core/Ap4File.cpp. An attacker could exploit the vulnerability to cause a denial of...

Mozilla Firefox Resource Management Error Vulnerability (CNVD-2023-17325)

Mozilla Firefox is an open source Web browser from the Mozilla Foundation. versions prior to Mozilla Firefox 103 are vulnerable to a resource management error that stems from a cache preload error. When loading a script with subresource integrity, an attacker could exploit the vulnerability to...

Google Android Information Disclosure Vulnerability (CNVD-2022-50278)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

Sourcecodester Hospital Patient Records Management System SQL注入漏洞（CNVD-2022-48760）

Sourcecodester Hospital Patient Records Management System is a web-based application that provides hospitals with an automated platform to store and manage their patient records. sourcecodester Hospital Patient Records Management System is vulnerable to SQL injection, which originates from...

Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2022-59686)

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. The application allows computers and devices to quickly read and efficiently perform video encoding or HEVC video. Microsoft HEVC Video Extensions suffers from a remote code execution vulnerability th...

Microsoft 3D Viewer remote code execution vulnerability

A code injection vulnerability exists in Microsoft 3D Viewer, a simplified and fast graphics editing application from Microsoft Corporation USA. The vulnerability stems from the process of constructing code segments from external input data that is not properly filtered by the network system or...

WordPress Code Snippets Extended跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Code Snippets Extended has a cross-site scripting vulnerability, and no details of the...

Jenkins vboxwrapper Plugin Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. Jenkins vboxwrapper Plugin 1.3 and earlier versions are vulnerable to a...

Shopware Cross-Site Scripting Vulnerability (CNVD-2022-47472)

Shopware is a suite of open source e-commerce software from the German company Shopware. cross-site scripting vulnerability exists in versions of Shopware prior to 5.7.9, which stems from a lack of filtering and escaping of user data in the plugin. No detailed vulnerability details are available...

Apple WebKit Out-of-Bounds Write Vulnerability

WebKit is the engine for Safari and other browsers on iOS and iPadOS. The Apple WebKit out-of-bounds write vulnerability can be exploited by an attacker to execute arbitrary code by tricking a user into visiting a specially crafted website...

Moodle Cross-Site Scripting Vulnerability (CNVD-2022-54914)

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. a cross-site scripting vulnerability exists in the LTI module of Moodle, which stems from a lack of data validation filtering of...

xiaohuanxiong SQL injection vulnerability

xiaohuanxiong is an open source comic CMS by guoguo individual developers. xiaohuanxiong version 1.0 is vulnerable to SQL injection, which originates from the id parameter in /app/controller/Books.php. No detailed vulnerability details are available...

D-Link Dir-823-Pro Command Injection Vulnerability (CNVD-2022-15178)

D-Link Dir-823-Pro is a dual-band smart wireless router from China Youxun D-Link. D-Link DIR-823-Pro v1.0.2 has a command injection vulnerability, which can be exploited by attackers to execute arbitrary commands via the ApCliKeyStr parameter...

Linux kernel out-of-bounds read vulnerability (CNVD-2023-98205)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from an out-of-bounds read vulnerability that stems from an out-of-bounds read problem in the parseleasestate method of the KSMBD implementation of the...

Google Android elevation of privilege vulnerability (CNVD-2022-50271)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

Jenkins Promoted Builds (Simple) Plugin Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application.A cross-site scripting vulnerability exist...

ZoneMinder Remote Code Execution Vulnerability

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A remote code execution vulnerability exists in versions prior to ZoneMinder 1.36.13, which can be exploited by attackers to cause arbitrary code execution...

Adobe Prelude Memory Corruption Vulnerability (CNVD-2022-02637)

Adobe Prelude is a set of video clip editing tools from Adobe. Adobe Prelude has a memory corruption vulnerability that can be exploited by remote attackers to execute arbitrary code in the context of the current user...

ICOVO input validation error vulnerability

ICOVO is a cross-platform solution that allows the use of tokens such as NFT on the OVO chain on Ether.ICOVO suffers from an input validation error vulnerability that stems from a lack of target address validation in the selfdestructs function, which can be exploited by attackers to steal tokens...

Aruba Networks ArubaOS Operating System Command Injection Vulnerability

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks including mobile controllers and mobile access switches from Aruba Networks, Inc. The vulnerability stems from multiple vulnerabilities identified in Aruba products. The vulnerabilities could be exploited by an...

Adobe Character Animator out-of-bounds read vulnerability

Adobe Character Animator is a motion capture and animation tool that provides everyone with an easy-to-use solution for intuitively animating 2D characters, animating in real time, and easily sharing and publishing characters. an out-of-bounds read vulnerability exists in Adobe Character Animator...

Jenkins Convertigo Mobile Platform Plugin跨站请求伪造漏洞（CNVD-2022-49790）

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. The vulnerability stems from a failure to perform permission checks in the...

Cobbler authorization issue vulnerability

Cobbler is a Linux installation server that allows for quick setup of network installation environments.Cobbler is vulnerable to authorization issues in versions prior to 3.3.0.The vulnerability stems from a lack of authentication measures or insufficient authentication strength in the network...

SQL Injection Vulnerability in Ai Qing Lemon CMS (CNVD-2021-51254)

Aizumi CMS is a php music website developed with php MySQL. Aizumi CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

File upload vulnerability exists in Panavision e-office (CNVD-2021-49104)

Panmicro e-office is a standard collaborative mobile office platform under Panmicro. A file upload vulnerability exists in Panmicro e-office, which can be exploited by an attacker to gain control of the server...

Google Android elevation of privilege vulnerability (CNVD-2023-82070)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by a BAL bypass flaw in the startActivityInner of ActivityStarter.java. An attacker can exploit this vulnerability to gain elevated privileges...

Jenkins Agent Server Parameter Plugin Cross-Site Scripting Vulnerability (CNVD-2022-49787)

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is an application software.A cross-site scripting...

Adobe Photoshop Out-of-Bounds Read Vulnerability (CNVD-2022-50237)

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. An out-of-bounds read vulnerability exists in Adobe Photoshop. An attacker could exploit this vulnerability to cause a sensitive memory leak...

Cobbler Command Injection Vulnerability (CNVD-2022-18324)

Cobbler is a network installation server suite that is primarily used to quickly set up Linux network installations. A command injection vulnerability exists in versions of Cobbler prior to 3.3.1, stemming from the checkforinvalidimports function in the templar.py file, which allows Cheetah code ...

Jellyfin Path Traversal Vulnerability

Jellyfin is a freeware media system. It allows you to control the management and streaming of media. It is an alternative to the proprietary Emby and Plex and can serve media from a dedicated server to end-user devices through multiple applications. A path traversal vulnerability exists in Jellyf...