7790 matches found
CVE-2022-31057
Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subject to an authenticated Stored XSS in Administration. Users are advised to upgrade. There are no known workarounds for this issue...
CVE-2022-31057 Authenticated Stored XSS in Shopware Administration
Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subject to an authenticated Stored XSS in Administration. Users are advised to upgrade. There are no known workarounds for this issue...
CVE-2022-31057
CVE-2022-31057 affects Shopware 5.x prior to 5.7.12, with an authenticated Stored XSS in Administration. The vulnerability originates from insufficient input/output filtering in the Admin context, enabling stored script execution. Remediation per multiple sources is to upgrade to Shopware 5.7.12 ...
PT-2022-19915 · Raytion · Raytion Custom Security Manager
Name of the Vulnerable Software and Affected Versions: Raytion Custom Security Manager version 7.2.0 Description: The administration interface of the Raytion Custom Security Manager allows reflected Cross-site Scripting XSS. This issue can be exploited through the administration interface,...
The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services service allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the EAS Console component of the Oracle Hyperion Essbase Administration Services exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information through...
The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform allows a perpetrator to gain read access to data and modify it. This component is part of the Oracle E-Business Suite, which facilitates automated business operations.
The vulnerability of the Marketing Administration component of the Oracle Marketing marketing platform exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, add, or delete data using the HTTP network protocol...
GHSA-Q754-VWC4-P6QJ Authenticated Stored Cross-site Scripting in Shopware
Impact Authenticated Stored XSS in Administration Patches We recommend updating to version 5.7.12. You can get the update to 5.7.12 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/de/changelog-sw5/5-7-12 For older versions you can use the Security...
Authenticated Stored Cross-site Scripting in Shopware
Impact Authenticated Stored XSS in Administration Patches We recommend updating to version 5.7.12. You can get the update to 5.7.12 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/de/changelog-sw5/5-7-12 For older versions you can use the Security...
Hindu Matrimonial Script 安全漏洞
A security vulnerability exists in Hindu Matrimonial Script, an online matrimonial service website of PHP Matrimonial Script India, which stems from improper privilege management in /admin/newsletter1.php. No details of the vulnerability are currently available...
Malicious code in azure-purview-administration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7efea71c1d64f97d0b5b7c52d63da10061cb70b849094b8486015fdc569182 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-1364 Malicious code in azure-purview-administration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef7efea71c1d64f97d0b5b7c52d63da10061cb70b849094b8486015fdc569182 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5530 Malicious code in purview-administration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f686c9599f3faaf07069d93046b31663340b47ae4ee5cf2c98a9f94336eab37c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in purview-administration (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f686c9599f3faaf07069d93046b31663340b47ae4ee5cf2c98a9f94336eab37c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in azure-purview-administration-samples-js (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad251bd8e2b53e3456bd7b4e683f0cce7e4d2ba5df80e1e3e5978e013ab67eee Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MaianAffiliate Code Injection Vulnerability Vulnerability
MaianAffiliate is a free, simple but powerful php referral system written in PHP. a security vulnerability exists in MaianAffiliate v.1.0, which stems from the existence of a PHP code injection issue. An authenticated attacker can exploit this vulnerability to obtain RCE through the MaianAffiliat...
The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite system allows a malicious actor to gain read access to data and modify it.
The vulnerability of the Marketing Administration sub-component of the Oracle Marketing component in the Oracle E-Business Suite exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, or...
CVE-2022-27512
Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM...
CVE-2021-38578
A flaw was found in edk2. A integer underflow in the SmmEntryPoint function leads to a write into the SMM region allowing a local attacker with administration privileges on the system to execute code within the SMM privileged context. The highest threat from this vulnerability is to data...
CVE-2022-1772
The Google Places Reviews WordPress plugin before 2.0.0 does not properly escape its Google API key setting, which is reflected on the site's administration panel. A malicious administrator could abuse this bug, in a multisite WordPress configuration, to trick super-administrators into viewing th...
CVE-2022-1772
The Google Places Reviews WordPress plugin before 2.0.0 does not properly escape its Google API key setting, which is reflected on the site's administration panel. A malicious administrator could abuse this bug, in a multisite WordPress configuration, to trick super-administrators into viewing th...