Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows...
CVE-2021-47942
Home Assistant Community Store (HACS) 1.10.0 contains a path traversal vulnerability that allows unauthenticated attacke
#severity:high
共收录 5513 条相关情报。
← 返回所有主题LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to...
CVE-2021-47954
LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queri
Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows...
CVE-2020-37247
Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local att
Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated...
CVE-2020-37244
Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbi
TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows...
CVE-2021-47976
TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload a
Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows...
CVE-2021-47972
Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the applica
Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the...
CVE-2021-47970
Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating
EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated...
CVE-2021-47956
EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate da
VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX...
CVE-2021-47974
VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise serv
Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the...
CVE-2020-37230
Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allow
Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service...
CVE-2020-37231
Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local a
Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the...
CVE-2020-37232
Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService
OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv...
CVE-2020-37229
OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows loc
HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows...
CVE-2020-37227
HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass cl
Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the...
CVE-2026-8657
Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() a
radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the...
CVE-2026-8696
radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that a
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl()...
CVE-2026-46367
phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that allows authenticate
Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated...
CVE-2021-47964
Schlix CMS 2.2.6-6 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitra
phpMyFAQ before 4.1.2 contains a sql injection vulnerability in CurrentUser::setTokenData that...
CVE-2026-46359
phpMyFAQ before 4.1.2 contains a sql injection vulnerability in CurrentUser::setTokenData that allows authenticated atta
phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId...
CVE-2026-46366
phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId() method that lacks pe