The vulnerability in the web interface of Cisco Firepower Management Center’s software for network management allows a perpetrator to carry out a cross-site scripting attack.

The vulnerability of the web interface for managing Cisco Firepower Management Center FMC software involves a lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

The vulnerability of Cisco Firepower Management Center’s network management software, related to resource exhaustion, allows a intruder to trigger a service failure.

The vulnerability of Cisco Firepower Management Center’s network management software is related to resource exhaustion. Exploiting this vulnerability can allow a malicious actor to deny service to the system...

HPE IlO Amplifier Pack 跨站脚本漏洞

HPE IlO Amplifier Pack is a database management software for use in clustered environments from HPE, USA. The software supports Gen8, Gen9 and Gen10 Hewlett Packard Enterprise automatic update of firmware, drivers, support for manual or automatic recovery of firmware damage to the system, maximiz...

The vulnerability of Delta Industrial Automation’s COMMGR software, related to buffer overflow in the stack, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Delta Industrial Automation COMMGR communication management software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Kingdee Cloud-Star has Arbitrary File Read Vulnerability

Kingdee Cloud-Star is a new generation of strategic enterprise management software developed by Kingdee Software China Co. Ltd. based on cutting-edge technologies such as cloud computing, big data, social networking, artificial intelligence and Internet of Things. There is an arbitrary file read...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-30941)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite.Oracle Sales...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-39939)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management and so on, a collection of management software, is seamlessly integrated with a management suite.Oracle Trade...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-30940)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite.Oracle Sales...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2021-37726)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is a seamless integration of a management suite.Oracle E-Busines...

SQL Injection Vulnerability in Production Management Software System of Jiangsu Hans Future Information Technology Co.

Jiangsu Hans Future Information Technology Co., Ltd, formerly known as "Huai'an Qixi Software Co., Ltd", was founded in 2009, is a technology-based enterprise mainly engaged in software development and sales. There is a SQL injection vulnerability in the production management software system of...

Unauthorized Access Vulnerability in OA System of Beijing Zhiyuan Internet Software Co.

Founded in 2002, Beijing Zhiyuan Internet Software Co., Ltd. is a high-tech enterprise always focusing on the field of collaborative management software, providing customers with professional collaborative management software products, solutions, platforms and cloud services. An unauthorized acce...

SQL Injection Vulnerability in Lotus Commercial Concrete Management Software of Hangzhou Lotus Software Co.

Hangzhou Lotus Software Co., Ltd, was registered in Hangzhou on 2004-01-07, belongs to the software and information technology services industry, the main industry is software and information technology services industry, the number of employees 5 people, the registered capital of 1 million yuan...

Unauthorized Access Vulnerability in Wave ClusterEngine

Wave ClusterEngine is a job management software customized for Wave Tissot series HPC products. An unauthorized access vulnerability exists in Wave ClusterEngine, which can be exploited by attackers to obtain sensitive information...

PT-2021-15430 · Eaton · Eaton Intelligent Power Manager

Name of the Vulnerable Software and Affected Versions: Eaton Intelligent Power Manager IPM versions prior to 1.69 Description: The issue concerns an unauthenticated eval injection vulnerability. It arises because the software fails to neutralize code syntax from users before using it in the dynam...

Weak password vulnerability in AVA interactive management software of Guangzhou Ovia Electronic Technology Co.

Ltd. is a high-tech enterprise focusing on the research and development, production, sales and service of education informatization products. There is a weak password vulnerability in the AVA Interactive Management Software of Guangzhou Ovia Electronic Technology Co., Ltd, which can be exploited ...

Web-School ERP Cross-Site Request Forgery Vulnerability (CNVD-2021-28279)

Web-School ERP is a school management software for schools and educational organizations. A cross-site request forgery vulnerability exists in Web-School ERP version 5.0. An attacker can exploit this vulnerability to create a studentleaveapplication request via...

Web-School ERP Cross-Site Scripting Vulnerability

Web-School ERP is a school management software for schools and educational organizations. A cross-site scripting vulnerability exists in the Activity Name and Description fields in Web-School ERP version 5.0. An attacker can exploit this vulnerability to inject and execute JavaScript code, which...

SQL Injection Vulnerability in Lotus Concrete Management Software v2.0

Hangzhou Lotus Software Co., Ltd. is a high-tech network company engaged in INTERNET information services and consulting services in the field of computer. The company's services include enterprise website setup integration project, e-commerce solutions, network marketing, system integration,...

Unauthorized Access Vulnerability in Jinwei Smart Restaurant

Jinwei Smart Restaurant is a free restaurant management software for all kinds of large and small restaurants, as well as fast food, Chinese food, western food, hot pot restaurant and other kinds of catering business. Jinwei Smart Restaurant has an unauthorized access vulnerability that can be...

Netop Vision Pro Access Control Error Vulnerability

Netop Vision is an application from the Danish company Netop. It provides a classroom management software. An Access Control Error vulnerability in Netop Vision Pro 9.7.1 and prior versions can be exploited by an unauthenticated, remote attacker to read or write files on a remote computer,...