CVE-2020-10553

Psyprax before 3.2.2 is affected. The PPScreen.ini file in %PROGRAMDATA%\Psyprax32 contains a hash for the application’s lockscreen. If the entry is removed, the lockscreen is not displayed and the application is no longer locked. All local users can modify this file, enabling potential bypass of...

Psyprax Encryption Problem Vulnerability

A security vulnerability exists in Psyprax beforee 3.2.2, which stems from passwords used to encrypt data being stored in a fuzzy format in a database...

CVE-2021-3021

ISPConfig before 3.2.2 allows SQL injection...

CVE-2021-3021

ISPConfig before 3.2.2 allows SQL injection...

ISPConfig SQL注入漏洞

ISPConfig is an open source web hosting management program for Linux with a Web control panel , you can use the Web control panel to manage web hosting , open a website , open a mailbox , open and manage mysql databases , support for DNS resolution and monitor the server's operating conditions an...

ALPINE-CVE-2020-7774

The package y18n before 3.2.2, 4.0.1 and 5.0.5, is vulnerable to Prototype Pollution...

Yargs Y18n Input Validation Error Vulnerability

Yargs Y18n is an I18n-like codebase written in Js by the individual developers of Yargs. An input validation error vulnerability exists in Yargs Y18n before versions 3.2.2, 4.0.1 and 5.0.5, which arises from a networked system or product that does not properly validate input data...

Security Bulletin: IBM Cloud Private is vulnerable to a Kubernetes vulnerability (CVEID: 182747)

Summary IBM Cloud Private is vulnerable to a Kubernetes vulnerability Vulnerability Details Third Party Entry: 182747 DESCRIPTION: Kubernetes kubelet man-in-the-middle CVSS Base score: 6 CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/182747 for the current score...

Security Bulletin: IBM Cloud Private is vulnerable to a Netty vulnerability (CVE-2020-11612)

Summary IBM Cloud Private is vulnerable to a Netty vulnerability Vulnerability Details CVEID: CVE-2020-11612 DESCRIPTION: Netty is vulnerable to a denial of service, caused by unbounded memory allocation while decoding a ZlibEncoded byte stream in the ZlibDecoders. By sending a large ZlibEncoded...

Cross-Site Scripting in gitbook

Affected versions of gitbook do not properly sanitize user input outside of backticks, which may result in cross-site scripting in the online reader. Recommendation Update to version 3.2.2 or later...

GHSA-5H5R-23R4-M87H Cross-Site Scripting in gitbook

Affected versions of gitbook do not properly sanitize user input outside of backticks, which may result in cross-site scripting in the online reader. Recommendation Update to version 3.2.2 or later...

Security Bulletin: IBM Cloud Private is vulnerable to multiple node.js vulnerabilities (CVE-2020-11080, CVE-2020-10531, CVE-2020-8172, CVE-2020-8174)

Summary IBM Cloud Private is vulnerable to multiple node.js vulnerabilities Vulnerability Details CVEID: CVE-2020-11080 DESCRIPTION: Node.js is vulnerable to a denial of service, caused by an error in the HTTP/2 session frame which is limited to 32 settings by default. By sending overly large...

NewStart CGSL CORE 5.04 / MAIN 5.04 : xerces-c Vulnerability (NS-SA-2020-0028)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has xerces-c packages installed that are affected by a vulnerability: - The Apache Xerces-C 3.0.0 to 3.2.2 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been...

Opmantek Open-AudIT SQL Injection Vulnerability

Opmantek Open-AudIT is an open source network discovery and auditing program from Opmantek USA. The program intelligently scans networks and network devices and provides status reports. A security vulnerability exists in Opmantek Open-AudIT version 3.2.2. An attacker can exploit the vulnerability...

Opmantek Open-AudIT Code Issue Vulnerability

Opmantek Open-AudIT is an open source network discovery and auditing program from Opmantek USA. The program intelligently scans networks and network devices and provides status reports. A code issue vulnerability exists in Opmantek Open-AudIT version 3.2.2. An attacker can exploit the vulnerabili...

Genius Bytes Genius Server usrInternalUsrCRUD plugin elevation of privilege vulnerability

Genius Bytes Genius Server is a set of data platforms for connecting IT infrastructure components from Genius Bytes Germany. usrInternalUsrCRUD is one of the internal user CRUD Create, Read, Update and Delete plug-ins. A security vulnerability exists in the usrInternalUsrCRUD plugin in Genius Byt...

Genius Bytes Genius Server BPM Component Code Injection Vulnerability

Genius Bytes Genius Server is a data platform for connecting IT infrastructure components from Genius Bytes Germany, of which BPM is a business process management component. A security vulnerability exists in the BPM component of Genius Bytes Genius Server Genius CDDS version 3.2.2. A remote...

CVE-2020-11943

An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload...

CVE-2020-11943

An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload...

CVE-2020-11943

An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload...