7268 matches found
PT-2023-20583 · Ibm · Ibm Http Server
Name of the Vulnerable Software and Affected Versions: IBM HTTP Server versions 8.5 Description: The issue allows a remote user to cause a denial of service using a specially crafted URL. Recommendations: For IBM HTTP Server version 8.5, consider restricting access to the server until a fix is...
PT-2023-20058 · Unknown · Online Reviewer Management System
Name of the Vulnerable Software and Affected Versions: Online Reviewer Management System version 1.0 Description: An issue was discovered in the Online Reviewer Management System, where a SQL injection can directly issue instructions to the background database system via the "reviewer...
PT-2023-19727 · Unknown · Simple Customer Relationship Management System
Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the name parameter under the "Request a Quote" function. Recommendations: F...
PT-2023-18865 · Unknown · Art Gallery Management System Project
Name of the Vulnerable Software and Affected Versions: Art Gallery Management System Project version 1.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter on the "enquiry page" A...
PT-2023-2938 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.09 multi Description: The issue is related to a stack overflow in the form fast setting wifi set function, specifically via the ssid parameter. This can potentially allow a remote attacker to cause a denial of...
PT-2023-16728 · Sourcecodester · Sourcecodester Doctors Appointment System
Name of the Vulnerable Software and Affected Versions: SourceCodester Doctors Appointment System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /admin/edit-doc.php. The manipulation of the oldmail argument leads to sql injection. The...
PT-2023-20438 · Unknown +2 · Zoneminder +2
Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.36.33 ZoneMinder versions prior to 1.37.33 Description: The issue is a Local File Inclusion Untrusted Search Path vulnerability via /web/index.php. By controlling $view, any local file ending in .php can be...
PT-2023-12340 · Unknown · Liman Central Management System
Name of the Vulnerable Software and Affected Versions: Liman Central Management System versions 1.7.0 through 1.8.3-462 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. This vulnerability affects the Liman...
PT-2023-16702 · Sourcecodester · Sourcecodester Online Hotel Reservation System
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Boat Reservation System version 1.0 Description: A vulnerability has been found in the file /boat/login.php of the component POST Parameter Handler. The manipulation of the argument un leads to cross site scripting. The...
PT-2023-13993 · Tibco Software · Tibco Businessconnect
Name of the Vulnerable Software and Affected Versions: TIBCO BusinessConnect versions 7.3.0 and below Description: The BusinessConnect UI component of TIBCO Software Inc.'s TIBCO BusinessConnect contains an easily exploitable issue that allows a low privileged attacker with network access to...
K31781390: January 2019 OpenSSH security vulnerabilities
Security Advisory Description In January 2019, a security researcher announced the discovery of the following OpenSSH SCP client vulnerabilities: CVE-2018-20685 OpenSSH: Improper check in scp.c:sink allows malicious servers to bypass access restrictions in scp client CVE-2019-6109 OpenSSH: Missin...
PT-2023-15696 · Checkmk · Checkmk
Name of the Vulnerable Software and Affected Versions: Checkmk versions 1.6.0 and earlier Checkmk versions 2.0.0 through 2.0.0p29 Checkmk versions 2.1.0 through 2.1.0p13 Description: A sensitive host secret is disclosed in the cmk-update-agent.log file, allowing an attacker to gain access to the...
PT-2023-6683
Name of the Vulnerable Software and Affected Versions Atlassian Confluence Data Center and Server versions prior to 7.19.16, 8.3.4, 8.4.4, 8.5.3, and 8.6.1 Description Atlassian Confluence Data Center and Server are affected by an improper authorization vulnerability that allows an unauthenticate...
PT-2023-16590 · Phjounin · Tftpd64-Se
Name of the Vulnerable Software and Affected Versions: phjounin TFTPD64-SE version 4.64 Description: A critical issue affects the processing of the file tftpd64 svc.exe, leading to an unquoted search path. The manipulation can be exploited locally, with a rather high complexity of attack and...
PT-2023-12921 · Palantir · Palantir Gotham
Name of the Vulnerable Software and Affected Versions: Palantir Gotham versions prior to 103.30221005.0 Description: The issue concerns an unauthenticated endpoint in Palantir Gotham that lists all active usernames on the stack with an active session. The affected services have been patched and...
PT-2023-13326 · Intel · Intel Sur
Name of the Vulnerable Software and Affected Versions: IntelR SUR software versions prior to 2.4.8902 Description: The issue is related to improper authentication, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions...
PT-2023-12922 · Palantir · Palantir Gotham
Name of the Vulnerable Software and Affected Versions: Palantir Gotham versions prior to 3.22.11.2 Description: The issue concerns an unauthenticated endpoint that could allow an attacker to exhaust the memory of the Gotham dispatch service. Recommendations: For versions prior to 3.22.11.2, updat...
PT-2023-13237 · Intel · Intel Sur
Name of the Vulnerable Software and Affected Versions: IntelR SUR software versions prior to 2.4.8902 Description: The issue is related to improper input validation, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions...
PT-2025-18812 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A warning in the Linux kernel has been resolved. The issue occurs when handling a discover identity message in the USB typec tcpm module. This warning can be triggered by specific...
SUSE CVE-2012-0756
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability tha...