9 matches found
HPESBNW05100 rev.1 - Multiple Vulnerabilities in HPE Networking EdgeConnect Orchestrator 9.6 branch
Potential Security Impact: Remote: Access Restriction Bypass, Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba EdgeConnect Enterprise Orchestration Software Please refer to the Affected Products section for a complete list of product software impacted HP...
CVE-2025-68010
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in netgsm Netgsm netgsm allows Reflected XSS.This issue affects Netgsm: from n/a through = 2.9.63...
Ribbon Communications Apollo 9608 信任管理问题漏洞
The Ribbon Communications Apollo 9608 is a Session Border Controller SBC from Ribbon Communications, Inc. that is used to protect and manage network traffic for real-time communications such as VoIP. A trust management issue vulnerability exists in the Ribbon Communications Apollo 9608 v9.6R3...
PHPCMS 安全漏洞
PHPCMS is a web content management system based on PHP and Mysql architecture by Abel Personal Developer. The system includes modules for news, images, downloads, information, products and more. A security vulnerability exists in PHPCMS version v.9.6.3, which stems from the inclusion of a...
UJCMS 安全漏洞
UJCMS is a Java open source content management system from dromara open source. A security vulnerability exists in UJCMS version 9.6.3, which stems from insufficient cleanup of embedded attributes in uploaded SVG files, and a stored Cross-Site Scripting XSS vulnerability that could allow an...
PT-2024-36519 · Ujcms · Ujcms
Name of the Vulnerable Software and Affected Versions: UJCMS version 9.6.3 Description: A Stored Cross-Site Scripting XSS issue exists in the authenticated SVG file upload and viewing functionality. This arises from insufficient sanitization of embedded attributes in uploaded SVG files. When a...
PT-2024-18823 · WordPress · Salon Booking System
Name of the Vulnerable Software and Affected Versions: The Salon booking system WordPress plugin versions prior to 9.6.3 Description: The issue arises from improper sanitization and escaping of the Mobile Phone field when booking an appointment, allowing customers to conduct Stored Cross-Site...
