PT-2022-13979

Name of the Vulnerable Software and Affected Versions The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin versions prior to 1.5.3 Description The plugin prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the...

CVE-2022-1580: Authorization Bypass Through User-Controlled Key

The Site Offline Or Coming Soon Or Maintenance Mode WordPress plugin before 1.5.3 prevents users from accessing a website but does not do so if the URL contained certain keywords. Adding those keywords to the URL's query string would bypass the plugin's main feature...

LibreNMS stored Cross-site Scripting via Schedule Maintenance `Title` parameter

LibreNMS versions 22.8.0 and prior allow attackers to execute arbitrary JavaScript code via the Schedule Maintenance Title parameter. A patch is available and anticipated to be part of version 22.9.0...

GHSA-3JH2-WMV7-M932 LibreNMS stored Cross-site Scripting via Schedule Maintenance `Title` parameter

LibreNMS versions 22.8.0 and prior allow attackers to execute arbitrary JavaScript code via the Schedule Maintenance Title parameter. A patch is available and anticipated to be part of version 22.9.0...

Xiamen Nalong Technology Co., Ltd. has a logic flaw vulnerability in its multi-center operation and maintenance management system

Founded in 2002, Nalong Health is a high-tech, special-purpose enterprise integrating R&D, production, sales and software services of medical electronic instruments and equipment. Ltd. multi-center operation and maintenance management system has a logic flaw vulnerability, which can be exploited ...

PT-2022-21221

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 22.9.0 Description The issue is related to Cross-site Scripting XSS - Stored, which allows attackers to execute arbitrary JavaScript code. Specifically, the Title parameter in the Schedule Maintenance feature is...

GHSA-VFV3-9W6V-23JP typemap is Unmaintained

The maintainer seems unreachable. The crate may or may not be usable as-is despite no maintenance and may not work in future versions of Rust. The last release seems to have been seven years ago...

PT-2022-28208 · Ansi Term · Ansi Term

Name of the Vulnerable Software and Affected Versions: ansi term affected versions not specified Description: The advisory for this issue has been withdrawn as it does not pertain to a specific vulnerability in the code of ansi term. The maintainer has advised that this crate is deprecated and wi...

Stored Cross-Site Scripting (XSS) on Schedule Maintenance "Title" parameter

Description Stored Cross-Site Scripting XSS vulnerability in LibreNMS v22.8.0 allows attackers to execute arbitrary javascript code in the browser affected from function of "Schedule Maintenance" in "Title" parameter. Proof of Concept 1 - Click "Alerts" Click "Schedule Maintenance" from the...

Important: postgresql

Issue Overview: A flaw was found in postgresql. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as...

CVE-2022-38304

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...

Sql injection

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...

CVE-2022-38302

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...

Online Leave Management System SQL注入漏洞

Sourcecodester Online Leave Management System is an online leave management system. A security vulnerability exists in Online Leave Management System v1.0, which originates from a SQL injection vulnerability in /maintenance/manageleavetype.php via the id parameter...

CVE-2022-38302: Improper Neutralization of Special Elements used in an SQL Command

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/managedepartment.php...

CVE-2022-38304: Improper Neutralization of Special Elements used in an SQL Command

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /maintenance/manageleavetype.php...

USN-5181-1 jqueryui vulnerability

It was discovered that jQuery UI did not properly validate the values from untrusted sources. An attacker could use this vulnerability to cause a crash or possibly execute arbitrary code. This issue affected only Ubuntu 18.04 ESM and Ubuntu 20.4 ESM. CVE-2021-41184 It was discovered that jQuery U...

SAMSUNG Mobile devices 路径遍历漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A path traversal vulnerability exists in the SMR Sep-2022 Release 1 version of SAMSUNG Mobile devices, which stems from CallBGProvider containing a pa...

CVE-2021-36829

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability in MyThemeShop Launcher: Coming Soon & Maintenance Mode plugin = 1.0.11 at WordPress...

WordPress plugin Launcher: Coming Soon & Maintenance Mode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...