839 matches found
CVE-2021-3897
An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 FPC2 and Lenovo System Management Module SMM firmware during an that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected...
CVE-2021-3849
An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 FPC2 and Lenovo System Management Module SMM firmware that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected...
CVE-2021-46030
There is a Cross Site Scripting attack XSS vulnerability in JavaQuarkBBS = v2. By entering specific statements into the background tag management module, the attack statement will be stored in the database, and the next victim will be attacked when he accesses the tag module...
CVE-2021-40035
There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability...
CVE-2020-20131
LaraCMS v1.0.1 contains a stored cross-site scripting XSS vulnerability which allows atackers to execute arbitrary web scripts or HTML via a crafted payload in the page management module...
CVE-2020-20347
WTCMS 1.0 contains a stored cross-site scripting XSS vulnerability in the source field under the article management module...
TYPO3 Allows Unrestricted File Upload in File Abstraction Layer
Problem By design, the file management module in TYPO3’s backend user interface has historically allowed the upload of any file type, with the exception of those that are directly executable in a web server context. This lack of restriction means it is possible to upload files that may be...
Arbitrary File Upload
Overview typo3/cms-core is a free open source enterprise content management system. Affected versions of this package are vulnerable to Arbitrary File Upload via the file management module that allows to upload of any file type, except for those that are directly executable in a web server contex...
CVE-2025-47939 TYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction Layer
TYPO3 is an open source, PHP based web content management system. By design, the file management module in TYPO3’s backend user interface has historically allowed the upload of any file type, with the exception of those that are directly executable in a web server context. This lack of restrictio...
CVE-2025-45819
CVE-2025-45819 affects Slims (Senayan Library Management Systems) version 9 Bulian 9.6.1. The issue is a SQL Injection vulnerability in the file path admin/modules/master_file/author.php, arising from inadequate input handling in that module. Documented impact in the CVE data shows low confidenti...
Exploit for Code Injection in Webkul Krayin_Crm
CVE-2025-3568 Privilege Escalation via Malicious SVG File...
CVE-2024-58113
Vulnerability of improper resource management in the memory management module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-58113
CVE-2024-58113 is associated with Huawei HarmonyOS and is described as a vulnerability in the memory management module due to improper resource management that can affect availability. The connected documents identify HarmonyOS as the affected platform and characterize the issue as a resource mis...
CVE-2025-3250
A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is some unknown functionality of the file /api/database/testConnect of the component Maintenance Management Module. The manipulation leads to deserialization. The attack may be...
CVE-2025-3250
A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is some unknown functionality of the file /api/database/testConnect of the component Maintenance Management Module. The manipulation leads to deserialization. The attack may be...
CVE-2025-3250
CVE-2025-3250 affects elunez eladmin 2.7, specifically deserialization in the Maintenance Management Module’s /api/database/testConnect endpoint. Publicly disclosed exploit suggests remote access is possible. Several connected sources corroborate a deserialization flaw in an unknown functionality...
CVE-2025-3250 elunez eladmin Maintenance Management Module testConnect deserialization
A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is some unknown functionality of the file /api/database/testConnect of the component Maintenance Management Module. The manipulation leads to deserialization. The attack may be...
CVE-2025-3250 elunez eladmin Maintenance Management Module testConnect deserialization
A vulnerability, which was classified as problematic, has been found in elunez eladmin 2.7. Affected by this issue is some unknown functionality of the file /api/database/testConnect of the component Maintenance Management Module. The manipulation leads to deserialization. The attack may be...