2783 matches found
PT-2025-1007
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Expedition affected versions not specified Description: A SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes,...
CVE-2024-46622
An Escalation of Privilege security vulnerability was found in SecureAge Security Suite software 7.0.x before 7.0.38, 7.1.x before 7.1.11, 8.0.x before 8.0.18, and 8.1.x before 8.1.18 that allows arbitrary file creation, modification and deletion...
CVE-2024-13145 zhenfeng13 My-Blog uploadController. java upload unrestricted upload
A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/site/blog/my/core/controller/admin/uploadController. java. The manipulation of the argument file leads to unrestricted upload. The attack...
CVE-2024-46622
The SecureAge Security Suite software is affected by an Escalation of Privilege vulnerability caused by the improper storage of permissions . This flaw allows attackers to perform arbitrary file creation, modification, and deletion . Affected versions include 7.0.x before 7.0.38 , 7.1.x before 7....
CVE-2024-13140 Emlog Pro Cover Upload article.php cross site scripting
A vulnerability classified as problematic has been found in Emlog Pro up to 2.4.3. Affected is an unknown function of the file /admin/article.php?action=uploadcover of the component Cover Upload Handler. The manipulation of the argument image leads to cross site scripting. It is possible to launc...
CVE-2025-0210
A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be...
CVE-2025-0202
CVE-2025-0202 concerns TCS BaNCS 10, where the vulnerability relates to the FILE PATH parameter in the REPORTS/REPORTS_SHOW_FILE.jsp file. The root cause is manipulation of the FilePath argument that can lead to file inclusion. The real existence of this vulnerability is still doubted according t...
[SECURITY] Fedora 40 Update: libxml2-2.12.9-1.fc40
This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...
PT-2025-25546
Name of the Vulnerable Software and Affected Versions Erlang OTP versions 17.0 through 28.0.1 Erlang OTP version 27.3.4.1 Erlang OTP version 26.2.5.13 stdlib versions 2.0 through 7.0.1 stdlib version 6.2.2.1 stdlib version 5.2.3.4 Description The issue is related to a Path Traversal vulnerability...
CVE-2024-13004
A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2024-12954
CVE-2024-12954 affects the 1000 Projects Portfolio Management System MCA 1.0. The vulnerability exists in the update_ach.php/file path area where manipulating the argument related to the upload parameter (ach_certy/ach certy) enables unrestricted (remote) file upload. This could allow an attacker...
[SECURITY] Fedora 41 Update: libcomps-0.1.21-4.fc41
Libcomps is library for structure-like manipulation with content of comps XML files. Supports read/write XML file, structures modification...
CVE-2024-12846 Emlog Pro link.php cross site scripting
A vulnerability, which was classified as problematic, has been found in Emlog Pro up to 2.4.1. Affected by this issue is some unknown functionality of the file /admin/link.php. The manipulation of the argument siteurl/icon leads to cross site scripting. The attack may be launched remotely. The...
CVE-2024-12843
A vulnerability was found in Emlog Pro up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/plugin.php. The manipulation of the argument filter leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclos...
CVE-2024-12783
A vulnerability was found in itsourcecode Vehicle Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /billaction.php. The manipulation of the argument extra-cost leads to cross site scripting. The attack may be initiated remotely. The explo...
File Manipulation
drupal/core is vulnerable to File Manipulation. The vulnerability is due to insufficient validation and sanitization of user-provided file paths, which can lead to unauthorized file access or manipulation...
CVE-2024-12359
A vulnerability was found in code-projects Admin Dashboard 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /vendormanagement.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploi...
CVE-2024-10776
Lua apps can be deployed, removed, started, reloaded or stopped without authorization via AppManager. This allows an attacker to remove legitimate apps creating a DoS attack, read and write files or load apps that use all features of the product available to a customer...
