15 matches found
MAL-2025-36800 Malicious code in thescene-ng2-lib (npm)
The package thescene-ng2-lib was found to contain malicious code...
CVE-2024-36800
A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...
CVE-2024-36800
A SQL injection vulnerability exists in SEMCMS version 4.8 . The flaw is caused by the improper neutralization of special elements used in an SQL command, specifically via the ID parameter in the Download.php file. A remote attacker can exploit this to obtain sensitive information . Remediation i...
CVE-2023-36800 Dynamics Finance and Operations Cross-site Scripting Vulnerability
...
CVE-2023-36800
CVE-2023-36800 is an XSS vulnerability affecting Microsoft Dynamics 365 (on-premises) / Dynamics 365 for Finance and Operations (on-premises) — specifically versions 9.0 and 9.1. The root cause is described as insufficient protection of the web page structure, enabling remote exploitation to spoo...
CVE-2023-36800 Dynamics Finance and Operations Cross-site Scripting Vulnerability
...
CVE-2022-36800
creationtimestamp| type| source ---|---|--- 2022-08-03 07:18:21+00:00| seen| https://t.me/cibsecurity/47471...
CVE-2022-36800
Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information Disclosure vulnerability in the browsegroups.action endpoint. The affected versions are before version 4.22.2...
CVE-2022-36800
Atlassian Jira Service Management Server/Data Center is affected by CVE-2022-36800 through an Information Disclosure in the browsegroups.action endpoint. Affected versions are prior to 4.22.2 (per NVD/NVD-derived records). Root cause is insufficient access validation that allows remote attackers ...
User without "Browse Users" permission can view groups - CVE-2022-36800
Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information Disclosure vulnerability in the browsegroups.action endpoint. The affected versions are before version 4.22.2. Affected...
CVE-2021-36800
creationtimestamp| type| source ---|---|--- 2021-08-05 03:23:12+00:00| seen| https://t.me/cibsecurity/26866...
CVE-2021-36800
CVE-2021-36800 affects Akaunting v2.1.12 and earlier. A code-injection flaw in Money.php allows a crafted POST to /{company_id}/sales/invoices/{invoice_id} with items[0][price] containing a PHP callable to be executed on the server. Root cause: lack of input sanitization in Money.php, with parseA...
CVE-2021-36800 Akaunting OS Command Injection in 'Money.php'
Akaunting version 2.1.12 and earlier suffers from a code injection issue in the Money.php component of the application. A POST sent to /companyid/sales/invoices/invoiceid with an items0price that includes a PHP callable function is executed directly. This issue was fixed in version 2.1.13 of the...