131391 matches found
Unspecified Vulnerability in Ajax.NET Professional
NET Professional is Ajax.NET Professional AjaxPro is one of the first AJAX frameworks available for Microsoft ASP.NET. NET Professional has a security vulnerability that originates from the possibility of deserializing arbitrary . An attacker could use this vulnerability to perform a...
Advantech R-SeeNet Cross-Site Scripting Vulnerability (CNVD-2021-92259)
Advantech R-SeeNet is an industrial monitoring software from Advantech, Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.A cross-site scripting vulnerability exists in Advantech R-SeeNet. The vulnerability stems fr...
GetSimple CMS Cross-Site Scripting Vulnerability (CNVD-2020-50147)
GetSimple CMS is a content management system CMS written in PHP. GetSimple CMS v3.3.16 suffers from an XSS vulnerability that stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability to execute client-side code...
Apache Dolphinscheduler Code Execution Vulnerability
Apache Dolphinscheduler is a modern data scheduling platform from the Apache USA Foundation. A code execution vulnerability exists in Apache Dolphinscheduler, which can be exploited by an attacker to execute arbitrary code on a system...
Google Chrome Web Audio API component buffer overflow vulnerability
Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a boundary error in the Web Audio API component when handling untrusted input. A remote attacker could exploit this vulnerability to cause hea...
Siemens Teamcenter Visualization and JT2Go Stack Buffer Overflow Vulnerability
Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2GO is a JT file viewer. Siemens Teamcenter Visualization and JT2Go are vulnerable to a stack buffer overflow vulnerability that could be exploited by an attacker...
Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2023-17324)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A remote code execution vulnerability exists in versions prior to Mozilla Firefox 103, which originates from a boundary error when processing HTML content, and is exploited by an attacker to create a...
Google Android elevation of privilege vulnerability (CNVD-2022-50272)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to gain elevated privileges on the system...
Prestashop SQL Injection Vulnerability (CNVD-2022-58389)
Prestashop is a set of open source e-commerce solutions from the United States Prestashop. The solution provides a variety of payment methods , short message alerts and product image scaling and other features . Prestashop suffers from a SQL injection vulnerability that originates from the...
ZOHO ManageEngine ADSelfService Plus Remote Code Execution Vulnerability (CNVD-2022-55220)
ZOHO ManageEngine ADSelfService Plus is an integrated self-service password management and single sign-on solution for Active Directory and cloud applications from ZOHO, Inc. version 6122, a remote code execution vulnerability exists that can be exploited by remote and partially authenticated...
Multiple Adobe Products Resource Management Error Vulnerability (CNVD-2022-46972)
Adobe Acrobat is a set of tools for editing and converting PDF files.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. A resource management error vulnerability exists in several Adobe products, which can be exploited by an attacker to execute arbitrary...
Oracle MySQL Cluster Input Validation Error Vulnerability (CNVD-2022-07912)
Oracle MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database developed by Oracle Corporation. Oracle MySQL Cluster 7.4.34, 7.5.24, 7.6.20, 8.0.27 and earlier versions are vulnerable to an input validation error. An attacker could use this vulnerability to corrupt or...
Jerryscript stack buffer overflow vulnerability
JerryScript is a lightweight JavaScript engine from the JerryScript project. jerryscript has a stack buffer overflow vulnerability in version 3.0.0, which stems from vmloop.ltopriv.304 in /jerry-core/vm/vm.c when handling untrusted input with a boundary error. An attacker could exploit this...
Adobe InCopy Memory Out-of-Bounds Access Vulnerability (CNVD-2021-87304)
Adobe InCopy is a professional word processing program from Adobe that is integrated with Adobe InDesign. Adobe InCopy 16.3.1, 16.3 and earlier versions are vulnerable to a memory out-of-bounds access vulnerability. An attacker could exploit the vulnerability to achieve arbitrary file system writ...
Apache HTTP Server code issue vulnerability (CNVD-2024-36389)
Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. Apache HTTP Server has a code issue vulnerability that can be exploited by an attacker to crash the server via a malicious request...
Adobe Premiere Rush Stack Buffer Overflow Vulnerability
Adobe Premiere Rush is a set of cross-platform video editing software from the U.S. company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Premiere Rush versions prior to 2.7, which stems from a boundary error when handling untrusted input. An attacker could exploit this...
Linux kernel cm4000_cs.c competition condition vulnerability
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel 6.0.6 and earlier versions have a contention condition vulnerability that originates in drivers/char/pcmcia/cm4000cs.c when calling open if cmmopen and cm4000detach, an attacker can exploit...
Samsung SecTelephonyProvider Information Disclosure Vulnerability (CNVD-2022-70741)
Samsung SecTelephonyProvider is a Telephony service for Samsung mobile devices that provides support for the Telephony Application Programming Interface TAPI.An information disclosure vulnerability exists in Samsung SecTelephonyProvider, which stems from a lack of protection for EventType in...
Multiple Adobe Products Resource Management Error Vulnerability (CNVD-2022-46977)
Adobe Acrobat is a set of tools for editing and converting PDF files.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. A resource management error vulnerability exists in several Adobe products, which can be exploited by an attacker to execute arbitrary...
libcaca Denial of Service Vulnerability
libcaca is an open source software library that converts images to color ASCII artwork. libcaca suffers from a denial of service vulnerability that stems from not properly handling incoming error messages, which can be exploited by remote attackers to cause a denial of service...
GNOME Glib Information Disclosure Vulnerability
GNOME Glib is a multi-platform toolkit for creating graphical user interfaces, and is the underlying core library that underlies GTK+ and GNOME projects. A security vulnerability exists in GSocketClient in GNOME GLib 2.62.4 and earlier versions prior to 2.60 are not affected, which stems from the...
D-Link DIR-818L Injection Vulnerability
The D-Link DIR-818L is a WiFi router from the Chinese company AUO D-Link. The D-Link DIR-818L suffers from an injection vulnerability that originates from a misbehavior in the file /htdocs/cgibin, which can be exploited by an attacker to bypass authentication and access restricted data by injecti...
Apache HTTP Server Input Validation Error Vulnerability (CNVD-2024-36390)
Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. An input validation error vulnerability exists in Apache HTTP Server, which can be exploited by an attacker to cause insecure...
Linux kernel denial of service vulnerability (CNVD-2024-1476840)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a denial of service vulnerability that originates from the presence of a null pointer dereference in the function ath10kwmitlvoppullmgmttxcomplev. An...
Matrix synapse resource management error vulnerability
synapse is an open source application developed by Matrix. Used for open federated instant messaging and VoIP. A resource management error vulnerability exists in Matrix synapse versions prior to 1.53.0, which stems from Synapse generating URL previews of media streams without limiting the...
Adobe Media Encoder Memory Corruption Vulnerability (CNVD-2022-50235)
Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. A memory corruption vulnerability exists in Adobe Media Encoder version 15.4 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the current user environmen...
SQL Injection Vulnerability in Physical Examination File Management System of Nanjing Zhongwei Xin Software Technology Co.
Ltd. is a national high-tech enterprise relying on independent research and development and technological innovation to form the core technology to carry out production and operation. There is a SQL injection vulnerability in the Medical Examination File Management System of Nanjing Zhongwei Xin...
unspecified vulnerability in simple-git-hooks
simple-git-hooks is an application. A simple git hooks manager for small projects. simple-git-hooks versions prior to 3.5.0 have security vulnerabilities that attackers exploit for command injection...
Mozilla Rust post-release reuse vulnerability
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. futures-task crate before 0.3.6 for Rust contains a security vulnerability that can be exploited by an attacker to potentially cause use-after-free in the case of non-static types...
Tecrail Responsive FileManager Input Validation Error Vulnerability
Tecrail Responsive FileManager is an open source file manager written in PHP by Tecrail Italy. The product supports the uploading and management of videos, images or other files. A security vulnerability exists in the ajaxcalls.php file in Tecrail Responsive FileManager 9.14.0 and earlier version...
Infineon RSA Library Cryptographic Security Bypass Vulnerability
The Infineon Trusted Platform Module TPM is a data encryption chip from Infineon Technologies, Germany.The Infineon RSA library is one of the encryption libraries. A security vulnerability exists in the Infineon RSA library version 1.02.013 of the Infineon TPM, which does not properly handle RSA...
Google Android elevation of privilege vulnerability (CNVD-2023-41878)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a privilege bypass in registerReceiverWithFeature of ActivityManagerService.java. An attacker can exploit the vulnerability to elevate...
Netdata Licensing Issue Vulnerability
Netdata is a high-fidelity infrastructure monitoring and troubleshooting application open-sourced by Netdata.Netdata suffers from an authorization issue vulnerability that stems from the fact that anyone with access to the Netdata agent can access its MACHINEGUID.No details of the vulnerability a...
ThinkPHP Command Execution Vulnerability (CNVD-2022-86535)
ThinkPHP is an open source lightweight PHP framework created to simplify enterprise-level application development and agile WEB application development. ThinkPHP there is a command execution vulnerability , the vulnerability is due to the opening of the multi-language function , the parameter lan...
Google TensorFlow Input Validation Error Vulnerability (CNVD-2023-15775)
Google TensorFlow is an open source platform for machine learning from Google, Inc. An input validation error vulnerability exists in Google TensorFlow, which stems from the fact that entering 'densefeatures' or 'examplestatedata' that is not rank 2 will trigger a 'CHECK' failure in...
Adobe InCopy Out-of-Bounds Write Vulnerability (CNVD-2022-50231)
Adobe InCopy is a text editing software for creative writing from Adobe, USA. Adobe InCopy suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...
Multiple Adobe Products Resource Management Error Vulnerability (CNVD-2022-46976)
Adobe Acrobat is a set of tools for editing and converting PDF files.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. A resource management error vulnerability exists in several Adobe products, which can be exploited by an attacker to execute arbitrary...
Xerte Cross-Site Scripting Vulnerability
Xerte is an open source software from The Xerte Project community in the UK. Used to create learning objects. Xerte has a security vulnerability that stems from a site scripting XSS vulnerability in The Xerte Project via the link parameter in print.php. No details of the vulnerability are current...
Google Chrome Animation Code Execution Vulnerability
Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome Animation, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service condition...
KiCad Buffer Overflow Vulnerability (CNVD-2022-11186)
Kicad is a free software for printed circuit board design from the KiCad Eda community. A security vulnerability exists in KiCad EDA, which stems from a stack buffer overflow vulnerability in the Viewer gerber and excellon GCodeNumber parsing functions in KiCad EDA 6.0.1 and master branches. An...
Adobe Premiere Elements null pointer dereference vulnerability
Adobe Premiere Elements is a video editing software application from Adobe. Adobe Premiere Elements 2021 build 19.0 and earlier versions are vulnerable to a null pointer dereference. An attacker could exploit this vulnerability to cause a memory leak...
Unspecified Vulnerability in MySQL Connectors (CNVD-2021-89938)
MySQL Connectors is a standards-based driver for JDBC, ODBC, and . NET that enables developers to build database applications in their language of choice. A security vulnerability exists in the Connector/J component of MySQL Connectors 8.0.26 and earlier versions. The vulnerability can be exploit...
Wireshark infinite loop vulnerability (CNVD-2022-11207)
Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. An infinite loop vulnerability...
Microsoft SharePoint Remote Code Execution Vulnerability
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A code injection...
strongSwan trust management issue vulnerability
strongSwan is a set of open source IPsec-based VPN solution for Linux platforms used by Andreas Steffen, a personal developer in Switzerland. The solution contains X.509 public key certificates, secure storage private keys, smart cards and other authentication mechanisms. strongSwan versions prio...
Apache Airflow code issue vulnerability
Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. Apache Airflow 2.4.1 and earlier versions have a code issue vulnerability that stems from the failure of deactivated users to prevent authenticated users from continuing to use t...
Product Show Room Site SQL注入漏洞
Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from /psrs/admin/categories/managefieldorder. php?id=page has a SQL injection issue. No detailed vulnerability details...
Product Show Room Site SQL Injection Vulnerability (CNVD-2022-48962)
Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/?page=user/manageuser&id= page. SQL injection problem. No detailed vulnerability details are...
Apache HTTP Server HTTP请求走私漏洞
Apache HTTP Server is an open source web server from the American Apache Apache Foundation. The server is fast, reliable, and extensible via a simple API. HTTP request smuggling vulnerability exists in Apache HTTP Server modproxyajp. An attacker could exploit this vulnerability to smuggle request...
Google Android Buffer Overflow Vulnerability (CNVD-2022-47668)
Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to a buffer overflow vulnerability that stems from a lack of boundary checks and can be exploited by attackers to cause a local privilege escalation...