30 matches found
PT-2021-20174
Name of the Vulnerable Software and Affected Versions Mitel MiContact Center Business versions 8.0.0.0 through 8.1.4.1 Mitel MiContact Center Business versions 9.0.0.0 through 9.3.1.0 Description The issue is related to the improper handling of tokens in the Software Development Kit, allowing an...
CVE-2021-27402: Improper Limitation of a Pathname to a Restricted Directory
The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access view and modify user data by injecting arbitrary directory paths due to improper URL validation, aka Directory Traversal...
CVE-2021-3352: Undefined Security Weakness
The Software Development Kit in Mitel MiContact Center Business from 8.0.0.0 through 8.1.4.1 and 9.0.0.0 through 9.3.1.0 could allow an unauthenticated attacker to access view and modify user data without authorization due to improper handling of tokens...
Magento Commerce Authentication Bypass
The vulnerability of the Magento Commerce development and management software platform is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information and modify user data...
CVE-2020-25609: Improper Neutralization of Input During Web Page Generation
The NuPoint Messenger Portal of Mitel MiCollab before 9.2 could allow an authenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an attacker to view and modify user data...
PT-2020-16124
Name of the Vulnerable Software and Affected Versions Mitel MiCollab versions prior to 9.2 Description The issue allows an authenticated attacker to execute arbitrary scripts due to insufficient input validation, also known as Cross-Site Scripting XSS. A successful exploit could allow an attacker...
Xi'an Baolian Network Technology Co., Ltd. construction system has logical flaws and vulnerabilities
Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. There is a logic flaw vulnerability in the construction system of Xi'an Bailian Network Technology Co. Attackers take...
CVE-2017-18042
The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-site request forgery CSRF vulnerability...
PT-2018-6634
Name of the Vulnerable Software and Affected Versions: Atlassian Bamboo versions prior to 6.3.1 Description: The issue allows remote attackers to modify user data, including passwords, via a Cross-site request forgery CSRF vulnerability. This is related to the update user administration resource...
