4336 matches found
Insurance Management System 安全漏洞
Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions, which stems from a cross-site scripting XSS vulnerability in the Email field...
Insurance Management System 安全漏洞
Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions that stems from a cross-site scripting XSS vulnerability in the City field...
PT-2024-23744
Name of the Vulnerable Software and Affected Versions Insurance Mangement System versions 1.0.0 and earlier Description The issue allows a remote attacker to execute arbitrary code via the First Name input field. This is a Cross Site Scripting vulnerability. Recommendations For versions 1.0.0 and...
Insurance Management System 安全漏洞
Insurance Management System is an insurance management system by the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions, which stems from a cross-site scripting XSS vulnerability in the Last Name field...
PT-2024-23269 · Unknown · Wholesalex
Name of the Vulnerable Software and Affected Versions: WholesaleX versions 1.3.2 and earlier Description: The issue is related to the deserialization of untrusted data. This can potentially lead to security risks, as deserializing untrusted data can allow an attacker to execute malicious code. No...
MediaWiki 安全漏洞
MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.39.3 and earlier versions, which stems fro...
PT-2024-19916 · Cincopa · Cincopa Post Video Players
Name of the Vulnerable Software and Affected Versions: Cincopa Post Video Players versions 1.159 and earlier Description: A Cross-Site Request Forgery CSRF issue affects Cincopa Post Video Players. This issue allows for malicious requests to be made on behalf of the user without their knowledge o...
PT-2024-13516 · Unknown · Terry Lin Wp Githuber Md
Name of the Vulnerable Software and Affected Versions: Terry Lin WP Githuber MD versions 1.16.2 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which can be exploited. No information is provided about the estimated number of potentially affecte...
CVE-2024-42950
Notes Author| Note ---|--- jdstrand | webkit receives limited support. For details, see https://wiki.ubuntu.com/SecurityTeam/FAQwebkit webkit in Ubuntu uses the JavaScriptCore JSC engine, not V8 mdeslaur | It is no longer possible to build new webkit2gtk versions on focal and earlier. Marking as...
Devolutions Server 安全漏洞
Devolutions Server is an application from Devolutions Canada. provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2024.1.6 and prior versions that stems from improper access control...
PT-2024-20567 · Woocommerce · Woocommerce Box Office
Name of the Vulnerable Software and Affected Versions: WooCommerce Box Office versions 1.2.2 and earlier Description: The issue is related to a Missing Authorization vulnerability in WooCommerce Box Office. Recommendations: For versions 1.2.2 and earlier, update to a version that contains a fix f...
thi.ng paths 安全漏洞
thi.ng paths is a path-based object property/array accessor with struct-shared immutable, optimized and optional types. A security vulnerability exists in thi.ng paths version v.5.1.62 and earlier. A remote attacker can exploit this vulnerability to execute arbitrary code via the mutIn and...
PT-2024-12043 · Codepeople · Codepeople Google Maps Cp
Name of the Vulnerable Software and Affected Versions: CodePeople Google Maps CP versions 1.0.43 and earlier Description: The issue is related to a Missing Authorization vulnerability in CodePeople Google Maps CP. This vulnerability affects the software by not properly checking authorization,...
Easyadmin 代码问题漏洞
Easyadmin is a simple, lightweight backend management system scaffolding by laker personal developer. A code issue vulnerability exists in EasyAdmin version 20240315 and prior versions. An attacker could exploit this vulnerability to perform a server-side request forgery attack...
PT-2024-22462 · Unknown · Niushop B2B2C
Name of the Vulnerable Software and Affected Versions: Niushop B2B2C versions 5.3.3 and earlier Description: A SQL injection issue allows an attacker to escalate privileges via the setPrice function of the Goodsbatchset.php component. The vulnerability is critical and can be exploited to gain...
PT-2024-14232 · Unknown · Funnelkit Checkout
Name of the Vulnerable Software and Affected Versions: FunnelKit Checkout versions 3.10.3 and earlier Description: A Missing Authorization issue affects the software, potentially allowing unauthorized access. The estimated number of affected devices is not specified. There is no information about...
StringIO 安全漏洞
StringIO is a Ruby input/output library open-sourced by The Ruby Programming Language. A security vulnerability exists in StringIO 3.0.2 and earlier versions, which stems from a buffer rewrite issue...
PT-2024-22185 · Unknown · Wen Responsive Columns
Name of the Vulnerable Software and Affected Versions: WEN Responsive Columns versions 1.3.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...
PT-2024-22169 · Zippy · Zippy
Name of the Vulnerable Software and Affected Versions: Zippy versions 1.6.9 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability. This allows for the upload of files with potentially dangerous types, which could lead to security issues...