Oracle PeopleSoft Enterprise CC Common Application Objects 安全漏洞

Oracle PeopleSoft Enterprise CC Common Application Objects is a Common Application Objects component from Oracle Corporation USA. A security vulnerability exists in Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2. An attacker could exploit the vulnerability to update, inser...

PT-2024-16993 · WordPress · Scancircle

Name of the Vulnerable Software and Affected Versions: ScanCircle plugin for WordPress versions up to, and including, 2.9.2 Description: The issue arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's scancircle shortcode. This allows...

Oracle PeopleSoft Enterprise CC Common Application Objects 安全漏洞

Oracle PeopleSoft Enterprise CC Common Application Objects is a Common Application Objects component from Oracle Corporation USA. A security vulnerability exists in Oracle PeopleSoft Enterprise CC Common Application Objects version 9.2. An attacker could exploit the vulnerability to update, inser...

Oracle PeopleSoft Products 安全漏洞

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle Corporation USA. The product provides human capital management, financial management, vendor relationship management, and other capabilities. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft...

Splunk Enterprise 安全漏洞

Splunk Enterprise is a suite of data collection and analytics software from Splunk, Inc. in the United States. A security vulnerability exists in Splunk Enterprise versions 9.2.x prior to 9.2.3 and 9.1.x prior to 9.1.6, which stems from a low-privileged user being able to view an image on a...

CVE-2024-35116

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, and 9.3 CD is vulnerable to a denial of service attack caused by an error applying configuration changes. IBM X-Force ID: 290335...

PT-2024-20700 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.2 LTS through 9.3 CD Description: The issue allows a remote user to cause a denial of service by sending HTTP requests that would consume all available resources. Recommendations: For IBM MQ versions 9.2 LTS through 9.3 CD,...

CVE-2024-30429

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Hans Matzen allows Stored XSS.This issue affects wp-forecast: from n/a through 9.2...

CVE-2023-45177

IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD is vulnerable to a denial-of-service attack due to an error within the MQ clustering logic. IBM X-Force ID: 268066...

Mattermost Security Vulnerabilities

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability exists in Mattermost versions 8.1.x through prior to 8.1.9, 9.2.x through prior to 9.2.5, and 9.3.0, which stems from an inability to clean up metadata on posts containing...

Arcserve Unified Data Protection Security Vulnerability

Arcserve Unified Data Protection is Arcserve's all-in-one data and ransomware protection solution. A security vulnerability exists in Arcserve Unified Data Protection prior to version 9.2 that stems from the presence of an authentication bypass, whereby an unauthenticated, remote attacker could...

CVE-2023-22083

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: Web UI. Supported versions that are affected are 9.0-9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Enterprise...

Oracle PeopleSoft Enterprise CC Common Application Objects Security Vulnerability

Oracle PeopleSoft Enterprise CC Common Application Objects is a Common Application Objects component from Oracle Corporation. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft Enterprise CC Common Application Objects version 9.2, which originated when a low-privileged attacker who...

CVE-2023-45855

qdPM 9.2 allows Directory Traversal to list files and directories by navigating to the /uploads URI...

qdPM Path Traversal Vulnerability

qdPM is a web-based open source project management tool. A security vulnerability exists in qdPM version 9.2 that stems from the presence of a directory traversal vulnerability. Allows an attacker to list files and directories by navigating to the /uploads URI...

qdPM Code Issues Vulnerabilities

qdPM is a web-based open source project management tool. A security vulnerability exists in qdPM version 9.2, which stems from a remote code execution vulnerability. The vulnerability allows an attacker to upload a .php file to the /uploads URI via the Add Attachments function to execute remote...

PT-2023-29286 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions 9.2.0 through 9.2.2 Description: A Cross Site Scripting XSS vulnerability in Concrete CMS allows an attacker to execute arbitrary code via a crafted script to the Tags from Settings - Tags. Recommendations: For versions...

CVE-2023-43044

IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system. IBM X-Force ID: 266893...

IBM License Metric Tool Path Traversal Vulnerability

The IBM License Metric Tool is a set of free tools from International Business Machines IBM that help IBM Passport Advantage Software Upgrade and Support Services customers determine their Processor Value Unit PVU license requirements. A path traversal vulnerability exists in IBM License Metric...

CVE-2023-5001

The Horizontal scrolling announcement for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'horizontal-scrolling' shortcode in versions up to, and including, 9.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...