Netop Vision Pro Elevation of Privilege Vulnerability

Netop Vision is an application from the Danish company Netop that provides a classroom management software. An elevation of privilege vulnerability exists in Netop Vision Pro 9.7.1 and earlier versions, which can be exploited by a local attacker to gain administrator privileges...

Netop Vision 安全漏洞

Netop Vision is an application from the Danish company Netop that provides a classroom management software. An elevation of privilege vulnerability exists in Netop Vision Pro 9.7.1 and earlier versions, which can be exploited by a local attacker to gain administrator privileges...

Kanboard has a weak password vulnerability

Kanboard is a free open source Kanban project management software. Kanboard has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

OTRS OTRS 权限许可和访问控制问题漏洞

OTRS is an application from the German company OTRS. A service management software. A security vulnerability exists in OTRS that originates from viewing a linked FAQ article without a license...

File Containment Vulnerability in Panavision e-message Management Interface

Ltd. was founded in 2001, headquartered in Shanghai, focusing on the field of collaborative management software, and is committed to collaborative OA as the core to help enterprises build a unified mobile office platform. A file inclusion vulnerability exists in the Panmicro e-message management...

File Upload Vulnerability in PowerSoft's Agile Development Framework

PowerSoft Agile Development Framework is a set of software system projects based on intelligent scalable components, suitable for enterprise management software and Internet platform back-end system development, the framework provides a perfect permissions role management functions, rapid...

Webware Webdesktop Code Issue Vulnerability

Webware Webdesktop is an application software from the company Webware in the Republic of Estonia. A document management software. A code issue vulnerability exists in Webware Webdesktop version 5.1.15. The vulnerability stems from the system allowing an attacker to read all files on the server. ...

CVE-2021-21326

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 it is possible to create tickets for another user with self-service interface without delegatee systems enabled. This is...

Design/Logic Flaw

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 it is possible to create tickets for another user with self-service interface without delegatee systems enabled. This is...

Aruba Networks AirWave Management Platform SQL Injection Vulnerability

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. An SQL injection vulnerability exists in the API of Aruba Networks...

OpenEMR SQL Injection Vulnerability (CNVD-2021-12109)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A SQL injection vulnerability exists in interface/reports/immunizationreport.php in OpenEMR versions prior to 5.0.2.5. A remote authenticated attacker can exploit this vulnerability to execute...

Directory Traversal Vulnerability in Jinshi Project Management Software of Dongying Jinshi Software Co.

Jinshi project management software is Jinshi software company to many construction enterprise management status quo as the starting point to create an information technology internal control management platform. There is a directory traversal vulnerability in Dongying Jinshi Software Company...

Unspecified Vulnerability in JetBrains YouTrack (CNVD-2021-09914)

JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in JetBrains YouTrack before 2020.6.1767, which stems from a...

Smarty Media New Media Smarty Security Breach

Smarty Media New Media Smarty is a software for demand management practices from Smarty Media, a German company This product is provided to anesthesiologists, psychotherapists, psychiatrists, neurologists and physicians who specialize in demand management practices. A security vulnerability exist...

Vulnerability Spotlight: Multiple vulnerabilities in phpGACL class

Claudio Bozzato of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered multiple vulnerabilities in the phpGACL class. One of these vulnerabilities also affects OpenEMR, a medical practice management software written in PHP. phpGACL is a PHP library...

Information Leakage Vulnerability in Zhiyuan A6-m Collaboration Management Software Enterprise Edition

Zhiyuan A6-m Collaboration Management Software Enterprise Edition is a collaboration management software for small and medium-sized enterprises. There is an information leakage vulnerability in Zhiyuan A6-m Collaboration Management Software Enterprise Edition. An attacker can exploit the...

CVE-2021-1225

Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities exist because the web-based management interface improperly validates value...

Cisco SD-WAN Buffer Error Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Networking solutions from Cisco USA. A security vulnerability exists in Cisco SD-WAN products that allows an unauthenticated, remote attacker to perform a denial-of-service DoS attack on an affected devic...

SQL Injection Vulnerability in ZDNT's Customer Resource Management System (CNVD-2021-08472)

ZDNT Customer Resource Management System is a foreign trade management and foreign trade customer management and other functions of the software. There is a SQL injection vulnerability in ZJUENT Customer Resource Management System, which can be exploited by attackers to obtain sensitive informati...

Cisco Finesse Cross-Site Scripting Vulnerability (NVD-C-2021-11018)

Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. Cisco Finesse suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client data in the WEB application, which can be exploited by an attacker to execute client...