66 matches found
CVE-2020-11561
In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen...
CVE-2020-11561
NCH Express Invoice 7.25 is affected by CVE-2020-11561. The vulnerability allows an authenticated, low-privilege user to craft a URL that gains access to higher-privileged functionalities, such as the Add New Item screen. Multiple connected sources (NVD, Red Hat, CNVD, CNVD-derived listings) corr...
CVE-2017-11561
creationtimestamp| type| source ---|---|--- 2019-05-23 16:48:21+00:00| seen| https://t.me/cvemitreorg/196 2019-05-23 20:29:27+00:00| seen| https://t.me/cibsecurity/4491...
CVE-2017-11561
CVE-2017-11561 affects ZOHO ManageEngine OpManager 12.2. An authenticated user can upload arbitrary files in the Group Chat or Alarm sections, enabling potential web shells. The vulnerability arises from insecure file upload handling, allowing an attacker to upload executable content. Public desc...
CVE-2019-11561
The CVE-2019-11561 affects the Chuango 433 MHz burglar-alarm product line, notably the OV2 base station. A Denial of Service condition causes the OV2 base station to fail to process sensor states, preventing the alarm from being triggered. This applies to Chuango-branded devices and similar produ...
CVE-2018-11561
CVE-2018-11561 affects the EETHER ERC20 smart contract; an integer overflow in the unprotected distributeToken function enables an attacker to illegitimately increase their digital assets. The vulnerability is described in multiple sources (NVD/CNVD) as a token-amount overflow in the distributeTo...