46 matches found
Yealink Config Encrypt Tool Security Vulnerability
YeaLink Yealink Config Encrypt Tool is a configuration encryption tool from China YeaLink. A security vulnerability exists in Yealink Config Encrypt Tool versions prior to 1.2, which stems from a possible decryption risk when encrypting Autop deployment files with a default key...
QAnything Security Breach
NetEase QAnything is a local knowledgebase Q&A system from NetEase that supports any file or database format, and can be installed and used offline. A security vulnerability exists in QAnything versions prior to 1.2.0, which stems from a security flaw in the component...
PT-2024-14834
Name of the Vulnerable Software and Affected Versions Mergen Software Quality Management System versions prior to v1.2 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attack...
CVE-2023-4737
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hedef Tracking Admin Panel allows SQL Injection.This issue affects Admin Panel: before 1.2...
Hedef Tracking Admin Panel SQL Injection Vulnerability
Hedef Tracking Admin Panel is a tracking admin panel from Hedef. A SQL injection vulnerability exists in Hedef Tracking Admin Panel versions prior to 1.2, which stems from incorrect neutralization of the particular element used...
PT-2023-30432
Name of the Vulnerable Software and Affected Versions Hedef Tracking Admin Panel versions prior to 1.2 Description The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
PT-2023-21104 · Decon Digital · Decon Wp Sms Plugin
Name of the Vulnerable Software and Affected Versions: Decon Digital Decon WP SMS plugin versions prior to 1.2 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Decon Digital Decon WP SMS...
CVE-2023-2960
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting XSS.This issue affects Oliva Expertise EKS: before 1.2...
CVE-2023-2963
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oliva Expertise Oliva Expertise EKS allows SQL Injection. This issue affects Oliva Expertise EKS: before 1.2...
CVE-2023-2960
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Oliva Expertise Oliva Expertise EKS allows Cross-Site Scripting XSS. This issue affects Oliva Expertise EKS: before 1.2...
MyCompanyFiles Oliva Expertise EKS 跨站脚本漏洞
MyCompanyFiles Oliva Expertise EKS is a file management application from MyCompanyFiles, Inc. A cross-site scripting vulnerability exists in MyCompanyFiles Oliva Expertise EKS versions prior to 1.2 that stems from vulnerability to cross-site scripting XSS attacks...
CVE-2023-27889
Cross-site request forgery CSRF vulnerability in LIQUID SPEECH BALLOON versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of a user and to perform unintended operations by having a user view a malicious page...
CVE-2022-3682
A vulnerability exists in the SDM600 file permission validation. An attacker could exploit the vulnerability by gaining access to the system and uploading a specially crafted message to the system node, which could result in Arbitrary code Executing. This issue affects: All SDM600 versions prior ...
SUSE CVE-2015-5654
Cross-site scripting XSS vulnerability in Dojo Toolkit before 1.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
PT-2022-3393 · Pypi · Request +1
Name of the Vulnerable Software and Affected Versions: keep versions prior to 1.2 Description: The issue is related to a code-execution backdoor inserted by a third party in the keep package for Python. This backdoor is associated with a malicious dependency named request. Exploitation of this...
CVE-2022-1279
A vulnerability in the encryption implementation of EBICS messages in the open source librairy ebics-java/ebics-java-client allows an attacker sniffing network traffic to decrypt EBICS payloads. This issue affects: ebics-java/ebics-java-client versions prior to 1.2...
CVE-2021-24510
The MF Gig Calendar WordPress plugin before 1.2 does not sanitise and escape the id GET parameter before outputting back in the admin dashboard when editing an Event, leading to a reflected Cross-Site Scripting issue...
PT-2021-20952 · Hitachi Abb Power Grids · Hitachi Abb Power Grids System Data Manager – Sdm600
Name of the Vulnerable Software and Affected Versions: Hitachi ABB Power Grids System Data Manager – SDM600 versions prior to 1.2 FP2 HF6 Build Nr. 1.2.14002.257 Description: A backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600, allowing ...
