CVE-2021-4195

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Firmanet Software and Technology Customer Relation Manager allows XSS Targeting HTML Attributes.This issue affects Customer Relation Manager: before 2022.03.13...

CVE-2022-47171

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin = 1.1 versions...

SAP NetWeaver 跨站脚本漏洞

SAP NetWeaver is a set of integrated service-oriented application platform from SAP Germany. The platform mainly provides a development and runtime environment for SAP applications. A cross-site scripting vulnerability exists in SAP NetWeaver, which stems from insufficient coding of user input an...

Online Graduate Tracer System SQL注入漏洞

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Online Graduate Tracer System version 1.0, which stems from an incorrect manipulation of the parameter input resulting in sql injecti...

Alpata Licensed Warehousing Automation System SQL注入漏洞

Alpata Licensed Warehousing Automation System is a licensed warehouse automation system from Alpata Corporation. A security vulnerability exists in the Alpata Licensed Warehousing Automation System that stems from poor handling of user input data prior to splicing SQL statements, which could lead...

Saysis Starcities SQL注入漏洞

Saysis Starcities is an application from Saysis, Inc. A security vulnerability exists in Saysis Starcities that stems from imperfect handling of user input data prior to splicing SQL statements, which could lead to an SQL injection vulnerability...

GHSA-XM67-587Q-R2VW wasmtime vulnerable to miscompilation of `i8x16.select` with the same inputs on x86_64

Impact Wasmtime's code generation backend, Cranelift, has a bug on x8664 platforms for the WebAssembly i8x16.select instruction which will produce the wrong results when the same operand is provided to the instruction and some of the selected indices are greater than 16. There is an off-by-one...

CVE-2023-22889

SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated users...

USN-5922-1 fribidi vulnerabilities

It was discovered that FriBidi incorrectly handled the processing of input strings, resulting in memory corruption. An attacker could possibly use this issue to cause FriBidi to crash, resulting in a denial of service, or potentially execute arbitrary code. CVE-2022-25308 It was discovered that...

CVE-2022-2178

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Saysis Computer Starcities allows Cross-Site Scripting XSS.This issue affects Starcities: before 1.1...

PT-2023-12670 · Saysis Computer · Starcities

Name of the Vulnerable Software and Affected Versions: Starcities versions prior to 1.1 Description: The issue affects Saysis Computer Starcities, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. This enables an attacker to inject malicious...

The vulnerability of Zyxel 5G NR/4G LTE CPE router’s micro-programming software arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows a hacker to execute arbitrary commands.

The vulnerability of Zyxel 5G NR/4G LTE CPE routers’ microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using a speciall...

The vulnerability of the command-line interface of ArubaOS systems allows a hacker to execute arbitrary commands.

The vulnerability of the command-line interface of ArubaOS systems exists due to the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using specially created arguments...

The vulnerability of D-Link DCS-930L Wi-Fi cameras lies in the lack of measures taken to neutralize special elements used in the operating system’s command structure. This allows intruders to execute arbitrary commands.

The vulnerability of D-Link DCS series Wi-Fi cameras exists due to the lack of measures taken to neutralize special elements used in the operating system’s command structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2023-16379

Name of the Vulnerable Software and Affected Versions ASOS Information Technologies Book Cites versions prior to 23.01.05 Description The issue is related to improper neutralization of input during web page generation, which allows Cross-Site Scripting XSS. This means an attacker could potentiall...

ASOS SOBIAD 跨站脚本漏洞

ASOS SOBIAD is a website. A security vulnerability exists in ASOS SOBIAD prior to version 23.02.01, which stems from improper neutralization of user input. An attacker could exploit the vulnerability to conduct a cross-site scripting attack...

ASOS Book Cites 跨站脚本漏洞

ASOS Book Cites is a website. A security vulnerability exists in ASOS Book Cites versions prior to 23.01.05 that stems from improper neutralization of user input. An attacker could exploit the vulnerability to conduct a cross-site scripting attack...

USN-5905-1 php7.0 vulnerabilities

It was discovered that PHP incorrectly handled certain gzip files. An attacker could possibly use this issue to cause a denial of service. CVE-2022-31628 It was discovered that PHP incorrectly handled certain cookies. An attacker could possibly use this issue to compromise data integrity...

USN-5904-1 sox vulnerabilities

Helmut Grohne discovered that SoX incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, Ubuntu 16.04 ES...

Glox Technology Useroam Hotspot SQL注入漏洞

Glox Technology Useroam Hotspot is a hotspot system from Glox Technology. Glox Technology Useroam Hotspot suffers from a SQL injection vulnerability that stems from an unsatisfactory neutralization of the particular element used, resulting in SQL injection...