CVE-2021-35114

CVE-2021-35114 is tied to Qualcomm Snapdragon automotive platforms. Multiple connected sources identify the root cause as an improper boundary check in the modem back-end driver, causing a buffer/boundary error that can lead to memory corruption. The CNNVD entry specifies Qualcomm SA8540P and SA9...

PT-2022-20486 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions prior to 8.7.47 ELTS TYPO3 versions prior to 9.5.34 ELTS TYPO3 versions prior to 10.4.29 TYPO3 versions prior to 11.5.11 Description: The Form Designer backend module of the Form Framework in TYPO3 is vulnerable to cross-site...

SQL Injection Vulnerability in mymps Backend

mymps is a php mysql based website builder. SQL injection vulnerability exists in mymps backend, which can be exploited by attackers to obtain sensitive database information...

Emlog 跨站脚本漏洞

Emlog is a PHP and MySQL based CMS website builder by Emlog's personal developer. A security vulnerability exists in Emlog Pro v1.0.4, which stems from a cross-site scripting XSS issue in the Emlog Pro backend administration...

GHSA-7M9H-V68W-PFW3 Neos CMS vulnerable to XSS in various backend modules

Multiple cross-site scripting XSS vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in versions 3.3.29 and 8.0.1 and could also ...

Neos CMS vulnerable to XSS in various backend modules

Multiple cross-site scripting XSS vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or HTML code using the editor function, the deletion of assets, or a workspace title. The vulnerabilities were found in versions 3.3.29 and 8.0.1 and could also ...

Car Rental Management System SQL注入漏洞

Car Rental Management System is a car rental management system. SQL injection vulnerability exists in Car Rental Management System, which can be exploited by attackers to view, add, modify or delete information in the back-end database...

Car Rental Management System SQL注入漏洞

Car Rental Management System is a car rental management system. SQL injection vulnerability exists in Car Rental Management System, which can be exploited by attackers to view, add, modify or delete information in the back-end database...

Car Rental Management System SQL注入漏洞

Car Rental Management System is a car rental management system. SQL injection vulnerability exists in Car Rental Management System, which can be exploited by attackers to view, add, modify or delete information in the back-end database...

Car Rental Management System SQL注入漏洞

Car Rental Management System is a car rental management system. SQL injection vulnerability exists in Car Rental Management System, which can be exploited by attackers to view, add, modify or delete information in the back-end database...

Cross-site Request Forgery (CSRF)

Overview Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF by allowing attackers to change the state of an order's adjustments if they hold its number, and the execution happens on a store administrator's computer. Remediation Upgrade solidusbackend to version...

CVE-2022-31000 CSRF allows attacker to finalize/unfinalize order adjustments in solidus_backend

solidusbackend is the admin interface for the Solidus e-commerce framework. Versions prior to 3.1.6, 3.0.6, and 2.11.16 contain a cross-site request forgery CSRF vulnerability. The vulnerability allows attackers to change the state of an order's adjustments if they hold its number, and the...

MAL-2022-72 Malicious code in @amcdc/backend-api-swagger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdf152986975b3c807745701930b9dbe420c924c2f23afd1271d21dc73bd6c63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security update for seamonkey (important)

openSUSE Security Update: Security update for seamonkey Announcement ID: openSUSE-SU-2022:0150-1 Rating: important References: 1194735 Cross-References: CVE-2021-45417 CVSS scores: CVE-2021-45417 SUSE: 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Leap 15.3 An update...

Linglong 安全漏洞

Linglong is an A-asset cruise scanning system by drunkkk's personal developer. It is used to discover assets, perform port blasting, and help organizations find weak password problems faster. Linglong v1.0 version has a security vulnerability that stems from an access control issue. An attacker...

GHSA-JFXF-4FRR-9J3Q XSS in various backend modules due to (un)escaping in JS notification module

The notification module displaying flash messages unscapes HTML coming from the server, resulting in XSS vulnerabilities with various names and labels of entities eg. workspace title or media title. This however means you must be a logged in user with respective rights in the first place to...

XSS in various backend modules due to (un)escaping in JS notification module

The notification module displaying flash messages unscapes HTML coming from the server, resulting in XSS vulnerabilities with various names and labels of entities eg. workspace title or media title. This however means you must be a logged in user with respective rights in the first place to...

Shopware Cross-site Scripting Vulnerability

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI...

GHSA-8QXH-HCR9-2379 Shopware Cross-site Scripting Vulnerability

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI...

GHSA-73WV-RGJ7-VJJ9 Aimeos Typo3 extension contains Cross-site Scripting vulnerability

The aimeos aka Aimeos shop and e-commerce framework extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows Cross-site Scripting XSS via a backend user account...