22216 matches found
PT-2023-14436 · Bulutses Information Technologies · Bulutses Call Center System
Name of the Vulnerable Software and Affected Versions: Bulutses Information Technologies Call Center System versions prior to 3.0 Description: The issue is related to an unauthenticated Sql Injection vulnerability. This vulnerability has been fixed in version 3.0. Recommendations: For versions...
CVE-2022-30332
In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of...
CVE-2022-4422 SQLi in Bulutdesk Callcenter
Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0...
PT-2023-13003 · Talend · Talend Administration Center
Name of the Vulnerable Software and Affected Versions: Talend Administration Center version 7.3.1.20200219 Description: The Forgot Password feature in the affected software provides different error messages for invalid reset attempts depending on whether the email address is associated with any...
Description of the security update for Excel 2013: January 10, 2023 (KB5002320)
Description of the security update for Excel 2013: January 10, 2023 KB5002320 Summary This security update removes the "temporarily restoring old behavior" mechanism that was introduced in the August 2022 Update KB5017166. Note: To apply this security update, you must have the release version of...
CVE-2022-4422 SQLi in Bulutdesk Callcenter
Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0...
chantillymedicalcenter.com Cross Site Scripting vulnerability OBB-3130340
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
centerforpedsgi.com Cross Site Scripting vulnerability OBB-3129630
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
carolinamedcenter.com Cross Site Scripting vulnerability OBB-3128928
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-44640
...
memos cross-site scripting vulnerability (CNVD-2023-04539)
memos is an open source hosted memo center with knowledge management and social features. memos versions prior to 0.9.1 contain a cross-site scripting vulnerability. An attacker could exploit this vulnerability to perform cross-site scripting attacks...
January 3, 2023, update for Office 2016 (KB5002293)
None None...
PT-2023-7517 · Atlassian · Confluence
Name of the Vulnerable Software and Affected Versions: Atlassian Confluence Server versions 4.x.x through 8.5.3 Atlassian Confluence Data Center versions 4.x.x through 8.6.1 Description: This issue allows an authenticated attacker, including one with anonymous access, to inject unsafe user input...
PT-2023-32217 · Gnome +3 · Gnome-Control-Center +3
Name of the Vulnerable Software and Affected Versions: gnome-control-center affected versions not specified Description: The issue arises when the system is configured to use systemd socket activation for openssh-server, causing gnome-control-center to not properly reflect the SSH remote login...
memos 跨站请求伪造漏洞
memos is an open source hosted meme center with knowledge management and social features. memos suffers from a cross-site request forgery vulnerability, which can be exploited by attackers to post on behalf of victims...
The vulnerability of the Huawei ManageOne data center management system, related to insufficient validation of input data, allows attackers to escalate their privileges.
The vulnerability of the Huawei ManageOne data center management system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges through specially created files...
annapolisfootandanklecenter.com Cross Site Scripting vulnerability OBB-3119255
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 练习 go 写 poc 用法 bash go get -u -v gith...
