131391 matches found
Google TensorFlow Input Validation Error Vulnerability (CNVD-2022-09876)
Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from an input validation error vulnerability that stems from the fact that TensorFlow allows tensors to have a large number of dimensions, each of which can be adjusted...
Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-90757)
Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited...
PortlandLabs Concrete CMS has an unspecified vulnerability
PortlandLabs Concrete Cms is a team-oriented open source content management system from PortlandLabs, Inc. PortlandLabs Concrete CMS has a security vulnerability that could be exploited by attackers to execute remote code...
Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-90761)
Open-xchange OX App Suite is a Web cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited by...
Open-xchange OX App Suite Cross-Site Scripting Vulnerability (CNVD-2021-90762)
Open-xchange OX App Suite is a web-based cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. A cross-site scripting vulnerability exists in Open-xchange OX App Suite, which can be exploited...
Linux kernel buffer overflow vulnerability (CNVD-2021-92971)
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel 5.15.2 and earlier versions have a security vulnerability that can be exploited by an attacker who can introduce a specially crafted device to trigger an out-of-bounds write via a specially...
Binatone Motorola-branded Camera Information Disclosure Vulnerability
Binatone Motorola-branded Camera is a Binatone licensed Motorola-branded product camera from Binatone Inc. The Binatone Motorola-branded Camera is vulnerable to information disclosure, which could be exploited by an attacker to download an encrypted log file containing sensitive information such ...
IBM Tivoli Key Lifecycle Manager Input Validation Error Vulnerability
IBM Tivoli Key Lifecycle Manager TKLM is a set of key lifecycle management software from IBM Corporation. The software provides key storage, key maintenance, and key lifecycle management for storage devices.A security vulnerability exists in IBM Tivoli Key Lifecycle Manager, which stems from the...
Buffer Overflow Vulnerability in Multiple Siemens Products (CNVD-2021-89442)
Capital VSTAR is a complete solution. the Nucleus NET module integrates a range of standards-compliant networking and communications protocols, drivers and utilities to provide full-featured networking support in any embedded device. the Nucleus RTOS is a microkernel-based real-time operating...
Bootstrap-Table has an unspecified vulnerability
Bootstrap-Table is an open source extension table from the individual developers of China Wenzhixin that integrates with some of the most widely used Css frameworks. bootstrap-table has a security vulnerability that stems from improper design or implementation during the development of code for a...
Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor (PRM) Model 3120 Data Validation Error Vulnerability
The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable cardiac rhythm management Crm programming system from Boston Scientific, Inc. The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is vulnerable to a data validation error that...
Google Android System Remote Code Execution Vulnerability (CNVD-2021-101436)
Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for short...
Macrob7 Macs Framework Cms SQL Injection Vulnerability
Macrob7 Macs Framework Cms is an open source Cms framework from the personal developer Macdonald Terrence Robinson. version 1.14 of the Macrob7 Macs Framework Content Management System is vulnerable to SQL injection, which allows attackers to SQL injection can be performed via the "roleId"...
ZTE MF971R Stack Buffer Overflow Vulnerability
The ZTE MF971R is a Cat 6 LTE mobile Wi-Fi router with download speeds up to 300mbps and upload speeds up to 50mbps.The ZTE MF971R is vulnerable to a stack buffer overflow vulnerability. An attacker can exploit this vulnerability to execute arbitrary code...
Yellowfin Cross-Site Scripting Vulnerability
Yellowfin is a business intelligence automated analytics, cross-vendor narrative and collaboration software suite. A stored cross-site scripting vulnerability exists in the video embedding feature in Yellowfin versions prior to 9.6.1. An attacker can exploit this vulnerability by sending a...
Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2021-82956)
Microsoft Office and Microsoft SharePoint are both products of Microsoft Corporation USA. Microsoft SharePoint is an enterprise business collaboration platform. Microsoft SharePoint Server has a remote code execution vulnerability, which can be exploited by attackers to achieve remote code...
Dell BIOS Trust Management Issue Vulnerability
BIOS is an acronym that stands for Basic Input Output System. Also known as "system setup", BIOS is the embedded software inside a small memory chip on the motherboard of a computer. This chip is called a complementary metal oxide semiconductor CMOS. The Dell BIOS is vulnerable to trust managemen...
Grav Access Control Error Vulnerability
Grav is a scalable CMS content management system for personal blogs, small content publishing platforms and single-page product displays. grav contains an access control error vulnerability that stems from the product's lack of validation of cookies and integrity checks. No detailed vulnerability...
Mozilla Rust Memory Corruption Vulnerability (CNVD-2021-85283)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. playXE/cgc for Mozilla Rust suffers from a memory corruption vulnerability that can be exploited by attackers to cause data contention...
libde265 Stack Buffer Overflow Vulnerability (CNVD-2021-78433)
libde265 is an open source implementation of the h.265 video codec. libde265 version 1.0.4 contains a stack buffer overflow vulnerability in the putqpelfallback function. An attacker can exploit the vulnerability to cause a denial of service via specially crafted files...
Jfinal cms improper access control vulnerability
Jfinal CMS is a powerful information consulting website developed in java that uses JFinal as the web framework, beetl for the template engine, mysql for the database, and bootstrap framework for the front-end. improper access control vulnerabilities exist in Jfinal CMS 4.7.1 and earlier versions...
Mozilla Rust Memory Corruption Vulnerability (CNVD-2022-01151)
A security vulnerability in Rust gfwx crate before 0.3.0, a general-purpose, compiled programming language from the Mozilla Foundation, stems from a limitation in ImageChunkMut's lack of sending or synchronization features, and could be exploited by an attacker to cause data contention and memory...
F5 BIG-IP DNS denial-of-service vulnerability
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in F5 BIG-IP DNS, which stems from the fact that when the BIG-IP DNS system is...
Google TensorFlow integer division by zero error vulnerability
Google TensorFlow is an end-to-end open source machine learning platform. An integer division by zero error vulnerability exists in the implementation of tf.rawops.SparseReshape in versions prior to Google TensorFlow 2.6.0. No details of the vulnerability are currently available...
Google TensorFlow null pointer dereference vulnerability (CNVD-2021-64073)
Google TensorFlow is an end-to-end open source machine learning platform. tf.rawops.UncompressElement code in versions prior to Google TensorFlow 2.6.0 is vulnerable to null pointer dereference. No detailed vulnerability details are available at this time...
Google TensorFlow null pointer dereference vulnerability (CNVD-2021-64071)
Google TensorFlow is an end-to-end open source machine learning platform. a null pointer dereference vulnerability exists in the rowpartitiontypes of the tf.rawops.RaggedTensorToTensor API in versions prior to Google TensorFlow 2.6.0. An attacker can exploit this vulnerability by sending invalid...
Crocoblock JetEngine Cross-Site Scripting Vulnerability
Crocoblock JetEngine is a dynamic content plugin that allows you to build complex websites quickly and cost-effectively.A cross-site scripting vulnerability exists in Crocoblock JetEngine that can be exploited by attackers to perform XSS via custom form input...
SAP Business One has unspecified vulnerabilities
SAP Business One is a suite of enterprise management software from SAP, a German company. SAP Business One has a security vulnerability that stems from a lack of authorization checks in the service level components, which could be exploited by an attacker to read, modify, or delete restricted dat...
Google TensorFlow Denial of Service Vulnerability (CNVD-2021-63069)
Google TensorFlow is an end-to-end open source machine learning platform. A security vulnerability exists in Google TensorFlow versions prior to 2.6.0. The vulnerability stems from the MLIR optimization of the L2NormalizeReduceAxis operator. An attacker can exploit the vulnerability to cause a...
GPAC null pointer dereference vulnerability (CNVD-2022-03634)
GPAC is an open source multimedia framework. gfdashsegmenterprobeinput function in GPAC version 0.8 has a null pointer dereference vulnerability that can be exploited by attackers to cause a denial of service via a specially crafted file in the MP4Box command...
Ffmpeg out-of-bounds read/write vulnerability
FFmpeg is a complete solution for recording, converting, and streaming audio and video from the FFmpeg team. ffmpeg has an out-of-bounds read/write vulnerability in version 4.4 summary, which originates from FFmpeg's libavcodec dnxhddec.c not checking the return value of the init vlc function,...
WordPress Handsome Testimonials&Reviews plugin SQL Injection Vulnerability
WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Handsome Testimonials&Reviews plugin is an application plugin for WordPress. Versions of the WordPress Handsome...
MaxSite CMS Cross-Site Scripting Vulnerability
MaxSite CMS is a web content management system from the Russian MaxSite CMS open source project. MaxSite CMS has a security vulnerability that allows remote attackers to inject arbitrary web scripts into the page using the vulnerability...
Neo4j has unspecified vulnerabilities
Neo4j is a Java-based and fully ACID-compatible graph database from Neo4j, which supports data migration, add-ons, etc. A security vulnerability exists in Neo4j Graph Database versions 4.2 and 4.3, which stems from a failure to reset the security environment during certain transaction operations ...
Sourcecodester Alumni Management System SQL Injection Vulnerability
Sourcecodester Alumni Management System is a Php, Mysql-based alumni management system from Sourcecodester, Inc. SourceCodester Alumni Management System version 1.0 is vulnerable to SQL injection, which allows remote attacker can exploit this vulnerability to execute arbitrary SQL statements via...
Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2021-57442)
Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite. Oracle Workflow...
Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2021-70130)
Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. The application enables computers and devices to read High Efficiency Video Encoding or HEVC video.A remote code execution vulnerability exists in Microsoft HEVC Video Extensions. An attacker could...
Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-66083)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Windows Kernel in Microsof...
GitLab Access Control Error Vulnerability (CNVD-2021-49038)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An access control error vulnerability exists in GitLab. An attacker can exploit this vulnerability ...
Wire cross-site scripting vulnerability (CNVD-2021-44982)
Wire is a chat software by an individual developer. The program supports Web, WindowsiOS, Android, and OS X platforms, has a group feature, allows voice calls, sends photos, and its original way of saying hello, PING. A cross-site scripting vulnerability exists in wire-webapp, which can be...
IPFire Firewall Remote Code Execution Vulnerability
IPFire Firewall is an open source Linux-based firewall system from the IPFire organization. IPFire Firewall suffers from a remote code execution vulnerability, and no detailed vulnerability details are provided at this time...
Unspecified Vulnerability in AVE DOMINAplus
AVE DOMINAplus is an application system from AVE Italy. The best home automation system for next generation houses. A security vulnerability exists in AVE DOMINAplus version 1.10.x and prior versions, which stems from the presence of an authentication bypass vulnerability. An attacker can exploit...
Fedora has an unspecified vulnerability
Fedora is a set of Linux operating systems from the Fedora community. A security vulnerability exists in Fedora's Mounting /proc filesystem, which can be exploited by an attacker to bypass the chroot environment and gain write access to files...
EC-CUBE cross-site scripting vulnerability (CNVD-2021-34683)
Ec-cube is an open source e-commerce system of the Japanese company Ec-cube . A cross-site scripting vulnerability exists in EC-CUBE versions 4.0.0 through 4.0.5. The vulnerability stems from a program that allows remote attackers to inject specially crafted script into specific input fields of E...
Qnap Systems QNAP HBS 3 Authorization Issues Vulnerability
Qnap Systems QNAP HBS 3 is an application from China Weilian Qnap Systems. A comprehensive data backup and disaster recovery solution. An authorization issue vulnerability exists in HBS 3 Hybrid Backup Sync that stems from a failure to perform adequate authorization checks. An attacker could use...
Valve Steam Buffer Overflow Vulnerability
Valve Steam is a suite of game distribution management platforms from Valve Corporation in the United States. The platform provides digital rights management, multiplayer, streaming, and social networking services. A buffer overflow vulnerability exists in Valve Steam version 2021-04-10 and earli...
Aruba Instant Arbitrary File Modification Vulnerability (CNVD-2021-26048)
Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant suffers from an arbitrary file modification vulnerability that can be exploited by an attacker via the Web UI to overwrite arbitrary files with content under their control...
Agentejo Cockpit NoSQL Injection Vulnerability (CNVD-2021-01561)
Agentejo Cockpit is a self-hosted "headless" and api-driven lightweight, open source content management system. A NoSQL injection vulnerability exists in Agentejo Cockpit versions prior to 0.11.2. The vulnerability can be exploited to conduct a NoSQL injection attack via the Controller/Auth.php...
GitLab Cross-Site Scripting Vulnerability (CNVD-2021-26074)
GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. A reflective cross-site scripting vulnerability exists in GitLab 10.8 and later, no details of the...
WordPress wpDataTables Lite plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wpDataTables Lite is a chart management plugin used in it. A cross-site scripting vulnerability exists in WordPress wpDataTables Lite...