8537 matches found
Cross site scripting
A Cross Site Scripting XSS vulnerability exists in pearadmin pear-admin-think =5.0.6, which allows a login account to access arbitrary functions and cause stored XSS through a fake User-Agent...
Philips e-Alert access control vulnerability
Philips Philips e-Alert is a proactive, sensor-based approach to monitoring imaging systems from Philips in the Netherlands. Provides rapid insight into critical MRI parameters, helping biomedical and Philips service engineers take quick action to resolve issues before they escalate. An access...
PT-2022-16323
Name of the Vulnerable Software and Affected Versions pear-admin-think versions =5.0.6 Description A Cross Site Scripting XSS issue exists, allowing a login account to access arbitrary functions and cause stored XSS through a fake User-Agent. Recommendations For versions =5.0.6, update to a versi...
CVE-2021-41594: Undefined Security Weakness
In RSA Archer 6.9.SP1 P3, if some application functions are precluded by the Administrator, this can be bypassed by intercepting the API request at the /api/V2/internal/TaskPermissions/CheckTaskAccess endpoint. If the parameters of this request are replaced with empty fields, the attacker achieve...
CVE-2021-46433
In fenom 2.12.1 and before, there is a way in fenom/src/Fenom/Template.php function getTemplateCodeto bypass sandbox to execute arbitrary PHP code when disablenativefuncs is true...
Fenom security vulnerabilities
fenom is a lightweight and fast PHP template engine. fenom 2.12.1 and earlier versions are vulnerable to code injection, which stems from a failure to properly filter the construct command special characters, commands, etc. in the getTemplateCode function of fenom/src/Fenom/Template.php, which ca...
ConfD CLI Command Execution Privilege Escalation
The vulnerability of the CLI command-line interface of the ConfD Common Execution Environment CEE for deploying and managing cloud network functions based on Cisco Ultra Cloud Core – Subscriber Microservices Infrastructure SMI is related to deficiencies in access control. Exploiting this...
PTC Axeda Authentication Bypass Service Disable
The vulnerability of the PTC Axeda platform for creating and deploying corporate-level applications is related to the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to disable certain services by sending specially crafted commands remote...
[SECURITY] Fedora 36 Update: proj-8.2.1-6.fc36
Proj and invproj perform respective forward and inverse transformation of cartographic data to or from cartesian data with a wide range of selectable projection functions...
[SECURITY] Fedora 36 Update: geos-3.10.2-4.fc36
GEOS Geometry Engine - Open Source is a C++ port of the Java Topology Suite JTS. As such, it aims to contain the complete functionality of JTS in C++. This includes all the OpenGIS "Simple Features for SQL" spatial predicate functions and spatial operators, as well as specific JTS topology...
DEBIAN-CVE-2021-4219
A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system...
CVE-2021-4219
A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system...
CVE-2021-4219
A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system...
UBUNTU-CVE-2021-4219
A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system...
Design/Logic Flaw
A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system...
CVE-2021-4219
A flaw was found in ImageMagick. The vulnerability occurs due to improper use of open functions and leads to a denial of service. This flaw allows an attacker to crash the system...
Fedora: Security Advisory for libcaca (FEDORA-2022-fc6b53e7a2)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Usage of deprecated Chainlink functions
Lines of code Vulnerability details Impact The Chainlink functions latestAnswer and getAnswer are deprecated. Instead, use the latestRoundData and getRoundData functions. Proof of Concept Go to and search for latestAnswer or getAnswer. You'll find the deprecation notice. Tools Used none Recommend...
ICT Protege GX/WX 2.08 Cross Site Scripting
ICT Protege GX/WX 2.08 Authenticated Stored XSS Vulnerability Vendor: Integrated Control Technology Ltd. Product web page: https://www.ict.co Affected version: GX: Ver: 2.08.1002 K1B3 Lib: 04.00.217 Int: 2.3.235.J013 OS: 2.0.20 WX: Ver: 4.00 284 H062 App: 02.08.766 Lib: 04.00.169 Int: 02.2.208...
GSD-2022-1000749 ice: fix concurrent reset and removal of VFs
ice: fix concurrent reset and removal of VFs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...