Show filters
10 Total Results
Displaying 1-10 of 10
Sort by:
Attacker Value
Unknown
CVE-2024-7099
Disclosure Date: October 13, 2024 (last updated October 14, 2024)
netease-youdao/qanything version 1.4.1 contains a vulnerability where unsafe data obtained from user input is concatenated in SQL queries, leading to SQL injection. The affected functions include `get_knowledge_base_name`, `from_status_to_status`, `delete_files`, and `get_file_by_status`. An attacker can exploit this vulnerability to execute arbitrary SQL queries, potentially stealing information from the database. The issue is fixed in version 1.4.2.
0
Attacker Value
Unknown
CVE-2023-47454
Disclosure Date: November 30, 2023 (last updated December 07, 2023)
An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows local users to gain escalated privileges through the urlmon.dll file in the current working directory.
0
Attacker Value
Unknown
CVE-2020-7620
Disclosure Date: April 02, 2020 (last updated February 21, 2025)
pomelo-monitor through 0.3.7 is vulnerable to Command Injection.It allows injection of arbitrary commands as part of 'pomelo-monitor' params.
0
Attacker Value
Unknown
CVE-2019-18954
Disclosure Date: November 14, 2019 (last updated November 27, 2024)
Pomelo v2.2.5 allows external control of critical state data. A malicious user input can corrupt arbitrary methods and attributes in template/game-server/app/servers/connector/handler/entryHandler.js because certain internal attributes can be overwritten via a conflicting name. Hence, a malicious attacker can manipulate internal attributes by adding additional attributes to user input.
0
Attacker Value
Unknown
CVE-2012-1383
Disclosure Date: March 07, 2012 (last updated October 04, 2023)
Unspecified vulnerability in the NetEase Reader (com.netease.pris) application 1.1.2 and 1.2.0 for Android has unknown impact and attack vectors.
0
Attacker Value
Unknown
CVE-2012-1380
Disclosure Date: March 07, 2012 (last updated October 04, 2023)
Unspecified vulnerability in the NetEaseWeibo (com.netease.wb) application 1.2.1 and 1.2.2 for Android has unknown impact and attack vectors.
0
Attacker Value
Unknown
CVE-2012-1385
Disclosure Date: March 07, 2012 (last updated October 04, 2023)
Unspecified vulnerability in the NetEase WeiboHD (com.netease.wbhd) application 1.0.0 for Android has unknown impact and attack vectors.
0
Attacker Value
Unknown
CVE-2012-1382
Disclosure Date: March 07, 2012 (last updated October 04, 2023)
Unspecified vulnerability in the Youdao Dictionary (com.youdao.dict) application 1.6.1, 2.0.1(2), and 3.0.0(1) for Android has unknown impact and attack vectors.
0
Attacker Value
Unknown
CVE-2012-1384
Disclosure Date: March 07, 2012 (last updated October 04, 2023)
Unspecified vulnerability in the NetEase Pmail (com.netease.rpmms) application 0.5.0 and 0.5.2 for Android has unknown impact and attack vectors.
0
Attacker Value
Unknown
CVE-2012-1381
Disclosure Date: March 07, 2012 (last updated October 04, 2023)
Unspecified vulnerability in the NetEase CloudAlbum (com.netease.cloudalbum) application 2.0.0 and 2.2.0 for Android has unknown impact and attack vectors.
0
