46 matches found
CVE-2023-48050
SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance aka odoo-biometric-attendance v. 13.0 through 16.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the db parameter in the controllers/controllers.py...
CVE-2021-4284
OpenMRS HTML Form Entry UI Framework Integration Module (up to 1.x) contains a cross-site scripting vulnerability. The affected component is tied to the Single-Input UI Framework Integration Module, with remote initiation possible and no specific affected version beyond 1.x identified in the prov...
CVE-2021-4284: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in OpenMRS HTML Form Entry UI Framework Integration Module up to 1.x. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.0.0 is able to addres...
PT-2022-11701 · Openmrs · Openmrs Html Form Entry Ui Framework Integration Module
Name of the Vulnerable Software and Affected Versions: OpenMRS HTML Form Entry UI Framework Integration Module versions up to 1.x Description: A vulnerability has been found in the OpenMRS HTML Form Entry UI Framework Integration Module, which affects an unknown part and leads to cross-site...
The vulnerability of the integration module of the Cisco Firepower Threat Defense (FTD) intrusion detection system’s microprogramming software allows a intruder to trigger a service failure.
The vulnerability of the integration module of the Snort intrusion detection system for Cisco Firepower Threat Defense FTD involves unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending a series of specially crafted I...
Anti-Spam by CleanTalk - Moderately critical - SQL Injection - SA-CONTRIB-2022-032
This module provides integration with the CleanTalk spam protection service. The module does not properly filter data in certain circumstances. Update: 2022-03-31 - fix release node links...
CVE-2021-35216
CVE-2021-35216 affects SolarWinds Patch Manager Patch Manager Orion Platform Integration module. The issue is described as insecure deserialization of untrusted data, leading to remote code execution. The ZDI advisory specifies that the flaw exists in the EditResourceControls endpoint and enables...
Security Bulletin: Upward Integration Module for HP Openview Operations for Windows is affected by multiple vulnerabilities in IBM Java SDK
Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition that is shipped with Upward Integration Module for HP Openview Operations for Windows. These issues were disclosed as part of the Java Technology Edition Quarterly CPU - January 2015. Vulnerability Details Abstract Ther...
[SECURITY] Fedora 23 Update: kf5-kglobalaccel-5.24.0-1.fc23
KDE Framework 5 Tier 1 integration module for global shortcuts...
[SECURITY] Fedora 23 Update: kf5-kidletime-5.24.0-1.fc23
KDE Frameworks 5 Tier 1 integration module for idle time detection...
[SECURITY] Fedora 23 Update: kf5-kwindowsystem-5.24.0-1.fc23
KDE Frameworks Tier 1 integration module that provides classes for managing and working with windows...
[SECURITY] Fedora 24 Update: kf5-kdnssd-5.24.0-1.fc24
KDE Frameworks 5 Tier 1 integration module for DNS-SD services Zeroconf...
[SECURITY] Fedora 24 Update: kf5-kiconthemes-5.24.0-1.fc24
KDE Frameworks 5 Tier 3 integration module with icon themes...
CVE-2015-5503
CVE-2015-5503 describes an open redirect in the Drupal Chamilo integration module (7.x-1.x) before 7.x-1.2. The vulnerability enables remote attackers to redirect users to arbitrary websites and conduct phishing via unspecified parameters. Affected component: Chamilo integration module in Drupal ...
PT-2015-6955
Name of the Vulnerable Software and Affected Versions Chamilo integration module versions 7.x-1.x before 7.x-1.2 for Drupal Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters. Recommendations For versions...
CVE-2015-5503: Undefined Security Weakness
Open redirect vulnerability in the Chamilo integration module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters...
CVE-2015-4347
CVE-2015-4347 describes a cross-site scripting (XSS) vulnerability in Drupal’s inLinks Integration module. The issue arises from insufficient sanitization of user input in some path arguments, allowing remote attackers to inject arbitrary web script or HTML. The advisory indicates the vulnerabili...
CVE-2015-4347
Cross-site scripting XSS vulnerability in the inLinks Integration module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified path arguments...
CVE-2015-3345
SQL injection vulnerability in the PHPlist Integration Module before 6.x-1.7 for Drupal allows remote administrators to execute arbitrary SQL commands via unspecified vectors, related to the "phpList database."...
CVE-2015-3345
SQL injection vulnerability in the PHPlist Integration Module before 6.x-1.7 for Drupal allows remote administrators to execute arbitrary SQL commands via unspecified vectors, related to the "phpList database."...