607 matches found
Osprey Pump Controller 命令注入漏洞
Osprey Pump Controller is a pump controller from Osprey. A security vulnerability exists in Osprey Pump Controller version 1.01 that stems from the presence of a command injection vulnerability. An attacker can exploit the vulnerability to gain access to the system...
CVE-2023-1541 Business Logic Errors in answerdev/answer
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-24729
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function...
CVE-2023-27214
Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php...
Health Center Patient Record Management System 跨站脚本漏洞
Health Center Patient Record Management System is a Health Center Patient Record Management System by Arvin Arandilla Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Health Center Patient Record Management System version 1.0, which stems from an issue with the...
PT-2023-16788 · Sourcecodester · Sourcecodester Health Center Patient Record Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Health Center Patient Record Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Health Center Patient Record Management System. This issue affects the file admin/fecalysis...
libde265 代码问题漏洞
Libde265 is a German h.265 video codec. A security vulnerability exists in libde265 version v1.0.10, which stems from a NULL pointer dereference issue found in the ffhevcputhevcepelpixels8sse method of the sse-motion.cc file...
CVE-2023-23158
A stored cross-site scripting XSS vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter on the enquiry page...
CVE-2023-24364
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel...
IBM MQ 输入验证错误漏洞
IBM MQ IBM WebSphere MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable, validated messaging backbone for service-oriented architectures SOA. An input validation error vulnerability exists in IBM MQ for HPE NonStop version...
CVE-2022-31405
MV iDigital Clinic Enterprise iDCE 1.0 stores passwords in cleartext...
PT-2023-16606 · Sourcecodester · Sourcecodester Employee Task Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Task Management System version 1.0 Description: A critical issue affects the processing of the file task-details.php, where the manipulation of the task id argument leads to sql injection. The attack can be initiated...
Intern Record System SQL注入漏洞
Intern Record System is an intern record system from the individual developers at Codeprojects. A security vulnerability exists in Intern Record System version 1.0. An attacker can exploit this vulnerability to execute arbitrary code and obtain sensitive information...
SUSE CVE-2018-8292
An information disclosure vulnerability exists in .NET Core when authentication information is inadvertently exposed in a redirect, aka ".NET Core Information Disclosure Vulnerability." This affects .NET Core 2.1, .NET Core 1.0, .NET Core 1.1, PowerShell Core 6.0...
SUSE CVE-2020-11525
libfreerdp/cache/bitmap.c in FreeRDP versions 1.0 through 2.0.0-rc4 has an Out of bounds read...
CVE-2023-0740 Cross-site Scripting (XSS) - Stored in answerdev/answer
Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.4...
CVE-2023-0741 Cross-site Scripting (XSS) - DOM in answerdev/answer
Cross-site Scripting XSS - DOM in GitHub repository answerdev/answer prior to 1.0.4...
Checkmk 输入验证错误漏洞
Checkmk is an editor. Checkmk has a security vulnerability that stems from its incorrect input validation of LDAP user ids allowing an attacker who has control over the LDAP user id to manipulate files on the server. The following versions are affected: 2.1.0p19 and earlier, 2.0.0p32 and earlier,...
Revenue Collection System 安全漏洞
Revenue Collection System is a land property billing and payment software by Carlo Montero Individual Developer. A security vulnerability exists in Revenue Collection System version v1.0 that stems from improper access control of its /admin/DBbackup/ component allowing an unauthenticated attacker...