CVE-2022-3760

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mia Technology Mia-Med. This issue affects Mia-Med: before 1.0.0.58...

CVE-2023-1211

SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2...

UBIT Student Information Management System 跨站脚本漏洞

UBIT Student Information Management System is a student management system from UBIT. A security vulnerability exists in UBIT Student Information Management System prior to version 20211126, which is an XSS vulnerability that stems from improperly neutralizing HTML-related tags in web pages...

PT-2023-16831 · Unknown · Answerdev/Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.6 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts. Thi...

answer 跨站脚本漏洞

answer is knowledge-based open source community software. You can use it to quickly build product technical support, customer support, user communication and other Q&A community. Answer versions prior to 1.0.6 have a cross-site scripting vulnerability that can be exploited by attackers to inject...

NEOSDiscovery 安全漏洞

NEOSDiscovery is the Discovery interface to the NEOS library. A security vulnerability exists in ualbertalib NEOSDiscovery versions prior to 1.0.71, which stems from the ability to use a web link to untrusted targets with access rights...

CVE-2021-45478

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.This issue affects Library Automation System: before 19.2...

CVE-2021-45477

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.This issue affects Library Automation System: before 19.2...

FlatPress 安全漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. A security vulnerability exists in FlatPress versions prior to 1.3. An attacker exploited the vulnerability to change file names or file paths...

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in microweber/microweber versions prior to...

Uptime Kuma 跨站脚本漏洞

Uptime Kuma is an easy-to-use, self-hosted monitoring tool from the individual developer Louis Lam. A security vulnerability exists in Uptime Kuma versions prior to 1.20.0, which stems from the Uptime Kuma name parameter allowing persistent XSS attacks...

CVE-2023-0919 Missing Authentication for Critical Function in kareadita/kavita

Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0...

CVE-2022-27170

Protection mechanism failure in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-13502 · Intel · Intel Sps Firmware

Name of the Vulnerable Software and Affected Versions: IntelR SPS firmware versions prior to SPS E3 06.00.03.300.0 Description: The issue is related to an improper condition check in the IntelR SPS firmware, which may allow a privileged user to potentially enable denial of service via local acces...

SUSE CVE-2005-3501

The cabdfind function in cabd.c of the libmspack library mspack for Clam AntiVirus ClamAV before 0.87.1 allows remote attackers to cause a denial of service infinite loop via a crafted CAB file that causes cabdfind to be called with a zero length...

SUSE CVE-2008-7251

libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 creates a temporary directory with 0777 permissions, which has unknown impact and attack vectors...

SUSE CVE-2009-0490

Stack-based buffer overflow in the Stringparse::getnonspacequoted function in lib-src/allegro/strparse.cpp in Audacity 1.2.6 and other versions before 1.3.6 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a .gro file containing a long string...

SUSE CVE-2010-2783

IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services...

SUSE CVE-2010-4261

Off-by-one error in the iconcb function in peicons.c in libclamav in ClamAV before 0.96.5 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third...

SUSE CVE-2011-3145

When mount.ecrpytfsprivate before version 87-0ubuntu1.2 calls setreuid it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfsprivate...