Natural Language Toolkit Resource Management Error Vulnerability

Natural Language Toolkit NLTK is a natural language processing toolkit written in Python.Natural Language Toolkit NLTK versions prior to 3.6.5 are vulnerable to resource management errors, which can be exploited by attackers to conduct denial of service attacks...

Adobe Dimension out-of-bounds read vulnerability

Adobe Dimension is a set of 2D and 3D composite design tools from Adobe, Inc. An out-of-bounds read vulnerability exists in Adobe Dimension, which can be exploited by attackers to cause sensitive memory leaks...

Video Sharing Website SQL Injection Vulnerability

Video Sharing Website is a video sharing website. video Sharing Website is vulnerable to SQL injection in v1.0, which stems from the application's lack of validation of externally entered SQL statements. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive...

Simple Forum-Discussion System SQL Injection Vulnerability

Simple Forum-Discussion System is a simple forum/discussion system. SQL injection vulnerability exists in Simple Forum-Discussion System, which originates in various components such as manage topic.php, manage user.php and ajax.php. Lack of validation of externally entered SQL statements. An...

WordPress WooCommerce Multivendor Marketplace SQL Injection Vulnerability

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. SQL injection vulnerability exists in versions of the WordPress WooCommerce Multivendor Marketplace plugin...

GPAC Code Issue Vulnerability (CNVD-2022-03661)

GPAC is an open source multimedia framework. GPAC is vulnerable to a code issue that could be exploited by attackers to cause segmentation errors and application crashes...

GPAC Denial of Service Vulnerability (CNVD-2022-03628)

GPAC is an open source multimedia framework. gfdumpsetup function in GPAC version 1.0.1 has a denial of service vulnerability that stems from certain security-related information being missed and can be exploited by an attacker to cause a denial of service...

Google Android out-of-bounds write vulnerability (CNVD-2021-101954)

Google Android is a Linux-based open source operating system from Google, Inc. An out-of-bounds write vulnerability exists in Google Android, which can be exploited by attackers to cause remote information disclosure without additional execution privileges...

MediaWiki licensing issue vulnerability (CNVD-2022-03907)

MediaWiki is a free and free-to-use web-based wiki engine from the U.S. Wikimedia MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. mediaWiki suffers from an authorization issue vulnerability that stems from a lack of...

WordPress StopBadBots plugin SQL injection vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. StopBadBots Plugin is a WordPress open source application plugin. WordPress StopBadBots Plugin in versions prior to...

Mozilla Firefox ESR input validation error vulnerability

Mozilla Firefox, an open source Web browser from the Mozilla Foundation, is vulnerable to an input validation error in Mozilla Firefox ESR that results from a parameter URL containing spaces that is not properly escaped when invoking a protocol handler for an external protocol. A remote attacker...

Veritas Enterprise Vault code issue vulnerability

Veritas Enterprise Vault is an enterprise-class file protection and archive automation software from Veritas, Inc. A security vulnerability exists in Veritas Enterprise Vault 14.1.2 and prior versions, where Enterprise Vault applications start multiple services that listen for commands from clien...

NXP i.MX SoC has unspecified vulnerabilities

NXP i.MX SoC is nxp's multi-core solution for multimedia and display applications with scalable, secure and reliable high-performance and low-power features. nXP i.MX SoC devices have a security vulnerability that stems from the OPTEE-OS CSU driver for NXP i.MX SoC devices lacking secure access...

Synapse path traversal vulnerability

Synapse is an application. for open federated instant messaging and VoIPSynapse. versions prior to Synapse 1.47.1 contain a path traversal vulnerability that could be exploited by an attacker to bypass the authentication process and download files from a remote server to an arbitrary directory...

Google TensorFlow Data Falsification Issue Vulnerability

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a data forgery vulnerability that stems from a lack of validation of invalid file formats in the checkpoint loading infrastructure, which can be exploited by an...

Google TensorFlow Numeric Error Vulnerability (CNVD-2022-09877)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a numeric error vulnerability that stems from TensorFlow's implementation of pooling operations in which values in a sliding window are not rigorously checked for...

Open-xchange OX App Suite Information Disclosure Vulnerability (CNVD-2021-90763)

Open-xchange OX App Suite is a Web-based cloud desktop environment from Open-Xchange Open-xchange, a US-based company. The environment allows users to more intuitively manage email, tasks, files, etc. An information disclosure vulnerability exists in Open-xchange OX App Suite, which could be...

Lantronix PremierWave 2050 OS Command Injection Vulnerability (CNVD-2022-01599)

The Lantronix PremierWave 2050 is an embedded enterprise Wi-Fi module from Lantronix, Inc. The Lantronix PremierWave 2050 in version 8.9.0.0R4 contains a security vulnerability that originates when the Web Manager wireless network scanner feature fails to properly filter special characters,...

Google Chrome service workers security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google chrome, which is caused by improper design or implementation during the development of code for a web system or product. A remote attacker could exploit the vulnerability to bypass security restrictions...

Samba Access Control Error Vulnerability

Samba is a standard Windows interoperability suite for Linux and Unix. Samba is vulnerable to an access control error that could be exploited by an attacker to retrieve plaintext passwords sent over the network...

pekeUpload cross-site scripting vulnerability

PekeUpload is a Jquery Html5 file upload plugin from the personal developer Pedro Molina in Colombia. pekeUpload suffers from a cross-site scripting vulnerability that exists due to insufficient cleanup of user-supplied data. A remote attacker could exploit the vulnerability to be able to trick a...

Google Android Framework Elevation of Privilege Vulnerability (CNVD-2021-101442)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the Framework component of Google Android versions 9, 10, 11, and 12. No detailed vulnerability details are available...

Google Android Framework Elevation of Privilege Vulnerability (CNVD-2021-101443)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the Framework component of Google Android version 12. No detailed vulnerability details are available...

ISC BIND Denial of Service Vulnerability (CNVD-2023-25100)

ISC BIND is an open source software implementation of the DNS protocol from ISC, Inc. A denial-of-service vulnerability exists in BIND, which stems from an error in the corresponding processing of the product's authorization server. An attacker could exploit the vulnerability to cause a performan...

Buffer Overflow Vulnerability in the NETGEAR R6260 Stack

NETGEAR R6260 is a router from Netgear, Inc. NETGEAR R6260 routers is vulnerable because the setupwizard.cgi page fails to properly validate the length of data when parsing the SOAP LOGIN TOKEN environment variable. An attacker could exploit this vulnerability to execute arbitrary code on an...

Adobe XMP Toolkit SDK Stack Buffer Overflow Vulnerability (CNVD-2021-91982)

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself.Adobe XMP Toolkit SDK 2021.07 and earlier versions are vulnerable to a stack buffer overflow. An attacker could exploit this vulnerability to execute arbitrary...

Apache Storm code issue vulnerability

Apache Storm is a free and open source distributed real-time computing system. Apache Storm code issue vulnerability. An attacker could exploit the vulnerability to achieve remote code execution...

ZTE MF971R Cross-Site Scripting Vulnerability

The ZTE MF971R is a Cat 6 LTE mobile Wi-Fi router with download speeds up to 300mbps and upload speeds up to 50mbps. The ZTE MF971R suffers from a type of cross-site scripting vulnerability. An attacker can exploit the vulnerability to obtain cookie information...

OnionShare file upload vulnerability

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, OnionShare has a file upload vulnerability tha...

VMware vCenter Server Information Disclosure Vulnerability (CNVD-2021-74283)

Vmware VMware vCenter Server is a suite of server and virtualization management software from Vmware, Inc. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructure. vmware vCenter Server is vulnerab...

Siemens SIPROTEC 5 relays buffer overflow vulnerability

Siemens SIPROTEC 5 is a multifunction relay from Siemens, Germany. A buffer overflow vulnerability exists in Siemens SIPROTEC 5 relays. An attacker can exploit the vulnerability by sending a constructed packet to port 4443/TCP, resulting in a denial of service condition or remote code execution...

Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2022-59600)

Microsoft SharePoint is a set of enterprise business collaboration platform developed by the U.S. Microsoft SharePoint Server has a spoofing vulnerability, which can be exploited by attackers to conduct spoofing attacks...

Google Chrome Stack Buffer Overflow Vulnerability (CNVD-2021-92833)

Chrome is a simple and efficient web browsing tool developed by Google. a stack buffer overflow vulnerability exists in ANGLE in versions prior to Google Chrome 93.0.4577.82. An attacker could exploit this vulnerability to potentially exploit stack corruption via a crafted HTML page...

Nextcloud Information Disclosure Vulnerability (CNVD-2021-70109)

Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. An information disclosure vulnerability exists in Nextcloud Richdocuments, which stems from the fact that there is no rate limitation on Richdocuments OCS...

Fortinet FortiOS has an unspecified vulnerability (CNVD-2021-101140)

Fortinet FortiOS is a security operating system from Fortinet that is dedicated to the FortiGate network security platform. The system provides users with a variety of security features such as firewall, anti-virus, IPSec/SSLVPN, Web content filtering and anti-spam.Fortinet FortiOS has a security...

Mautic Security Feature Issue Feature Issue Vulnerability

Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. mautic versions prior to 3.3.4 and versions prior to 4.0.0 are vulnerable to a security feature issue that stems from the mtrand function in the softwar...

F5 Access Guided Configuration logging information disclosure vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. The F5 Access Guided Configuration logging information disclosure vulnerability can be exploited by attackers to obtain...

F5 BIG-IP TMM Denial of Service Vulnerability (CNVD-2021-65647)

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP TMM, which stems from an undisclosed request when configuring the...

Discourse code issue vulnerability

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features.A code issue vulnerability exists in versions of Discourse prior to 2.7.8 and prior to 2.8.0.beta4. No detailed vulnerability details are currently available...

Linux kernel denial of service vulnerability (CNVD-2021-60516)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel suffers from a denial of service vulnerability that is caused by an out-of-bounds read flaw in strlen in fs/nfsd/trace.h. A remote attacker can exploit this vulnerability to cause a denial o...

Foxit PDF Reader Post-release Reuse Vulnerability (CNVD-2021-64090)

Foxit PDF Reader formerly known as Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. The vulnerability stems from not verifying the existence of the object before performing operations on it. An attacker could exploit this vulnerability to execut...

MetInfo Cross-Site Request Forgery Vulnerability (CNVD-2022-05449)

MetInfo using PHP + Mysql architecture, is a very SEO-friendly, full-featured, support for multi-language, responsive display, extremely suitable for business, corporate website construction cms station-building system. Metinfo 6.1.3 version of the existence of cross-site request forgery...

deepmergefn has unspecified vulnerabilities

deepmergefn is an application. A deepmergefn mixes two data objects. deepmergefn suffers from a security vulnerability that stems from vulnerability to prototype contamination via the deepMerge function, which can be exploited by attackers to cause remote code execution...

tinyexr Denial of Service Vulnerability (CNVD-2021-94957)

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::SaveEXR component. An attacker could exploit this vulnerability to cause a denial of...

SourceCodester Fantastic Blog CMS SQL Injection Vulnerability

SourceCodester Fantastic Blog CMS is an application. Absolutely brilliant web content management system for blogs/posts. SourceCodester Fantastic Blog CMS has a security vulnerability that can be exploited by attackers to execute arbitrary SQL statements via the id parameter to category.php...

Rancher Labs Rancher Licensing Issue Vulnerability

Rancher Labs Rancher is an open source enterprise container management platform from Rancher Labs, Inc. Rancher Labs Rancher has an authorization issue vulnerability that stems from the product's lack of effective privilege management for the management of critical resources, which could be...

Siemens Jt2go and Siemens Teamcenter Visualization Remote Code Execution Vulnerability

Siemens Jt2go and Siemens Teamcenter Visualization are both products of Siemens AG, Germany. Siemens Jt2go is a JT file viewer. A remote code execution vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2, which stems from a failure of t...

IBM AIX Input Validation Error Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. IBM AIX is vulnerable to an input validation error that allows a local user with higher group privileges to exploit a vulnerability in the lpd daemon. No detailed vulnerability details are...

Plone Cross-Site Scripting Vulnerability (CNVD-2021-46652)

Plone is an open source content management system CMS built on the Zope application server. Plone suffers from a cross-site scripting vulnerability in versions 5.0 through 5.2.4 that stems from the fact that if a contributor creates a folder with a SCRIPT tag in the description field, the editor ...

Advantech WebAccess HMI Designer Buffer Overflow Vulnerability (CNVD-2021-60558)

Advantech WebAccess HMI Designer is a human-machine interface integrated development tool from Advantech of Taiwan, China. WebAccess HMI Designer 2.1.9.95 and earlier versions contain a security vulnerability that could be exploited by remote attackers to trigger a heap-based buffer overflow and...