CVE-2023-41888

CVE-2023-41888 concerns GLPI (Gestionnaire Libre de Parc Informatique). Multiple connected sources describe vulnerabilities in GLPI prior to fixed versions, including pre-10.13 and pre-10.0.13 lines, with various flaws (SQL injection, SSRF, XSS, unauthorized data access) that could enable informa...

CVE-2023-41888 Phishing through a login page malicious URL in GLPI

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. The lack of path filtering on the GLPI URL may allow an attacker to transmit a malicious URL of login page...

CVE-2023-41324

GLPI (Gestionnaire Libre de Parc Informatique) vulnerability CVE-2023-41324 is evidenced in connected records as a SQL injection flaw in GLPI’s search functionality. Affected are GLPI versions prior to 10.0.13 (per PT Security entries); authenticated users can exploit the flaw to access or extrac...

CVE-2023-41323

CVE-2023-41323 affects GLPI (Gestionnaire Libre de Parc Informatique). An unauthenticated attacker can enumerate user logins, exposing usernames. Root cause: information disclosure enabling enumeration without authentication; impact is limited to confidentiality (usernames exposed) with no other ...

The vulnerability of the software for managing medical organizations, OpenEMR, related to authentication errors, allows a perpetrator to escalate their privileges.

The vulnerability of the software for managing medical organizations called OpenEMR is related to authentication errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of the org.keycloak.userprofile component of the identity and access management software allows a perpetrator to gain access to user credentials.

The vulnerability of the org.keycloak.userprofile component in the identity and access management software involves the transfer of data in an open manner. Exploiting this vulnerability could allow a malicious actor to gain access to user credentials...

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers allows a perpetrator to disclose protected information, perform arbitrary functions, or cause service failures.

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers, QMS Automotive, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information, perform arbitrary functions, or...

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers allows a violator to intercept an active session.

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers, QMS Automotive, is related to incorrect session duration. Exploiting this vulnerability could allow an attacker to intercept the active session...

The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, arises from the fact that confidential information is stored in unencrypted form in memory, allowing a hacker to obtain user account details.

The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, relates to the storage of confidential information in unencrypted form in memory. Exploiting this vulnerability could allow a malicious actor to access user credentials remotely...

The vulnerability of the software for quality management systems in the automotive industry, related to the transmission of data in an open format, allows a attacker to perform a “Man-in-the-Middle” attack.

The vulnerability of quality management software for automobile manufacturers is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a remote attacker to carry out a Middleware-In-The-Middle MITM attack...

CVE-2023-4835

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection.This issue affects Oil Management Software: before 20230912...

CVE-2023-4835

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

CVE-2023-4835

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection.This issue affects Oil Management Software: before 20230912...

CVE-2023-4835 SQLi in CF's Oil Management Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

CVE-2023-4835

CVE-2023-4835 describes an SQL Injection in CF Software Oil Management Software, caused by improper neutralization of special elements in SQL commands. Affected: Oil Management Software versions prior to 20230912. Impact is SQL injection; no exploitation details are provided in the documents. Mit...

CF Software Oil Management Software SQL Injection Vulnerability

CF Software Oil Management Software is an oil management software from CF Software. A SQL injection vulnerability exists in versions of CF Software Oil Management Software prior to 20230912, which stems from improper neutralization of special elements...

Acronis Cloud Manager 输入验证错误漏洞

Acronis Cloud Manager is a cloud manager from Acronis Singapore that provides advanced monitoring, management, migration, and recovery for Microsoft cloud environments of all shapes and sizes. Acronis Cloud Manager suffers from an input validation error vulnerability that stems from improper inpu...

Rockwell Automation ThinManager Path Traversal Vulnerability (CNVD-2023-64278)

Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers simultaneously. A path traversal vulnerability exists in Rockwell Automation Thinmanager Thinserver, which stems from the...

Intel PSR Code Issue Vulnerability

Intel PSR is a management and security status application from IntelR Corporation. A security vulnerability exists in IntelR PSR SDK versions prior to 1.0.0.20. An attacker can exploit the vulnerability to elevate privileges...