Virtuoso Open-Source Edition SQL注入漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform from OpenLink Software open source. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.9, which...

Virtuoso Open-Source Edition SQL注入漏洞

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.9 that stems...

Adobe Magento 操作系统命令注入漏洞

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...

Command Execution Vulnerability in Zendo Open Source Edition (CNVD-2020-71672)

Zendo Open Source Edition is a research and development project management software. Zendo Open Source Edition suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

There are SQL injection vulnerabilities in the backend of Zendo open source version of Qingdao Yiqi Tianchuang Management Consulting Co.

Zendo Open Source Edition is a research and development project management software. There is a SQL injection vulnerability in the backend of Zendo Open Source Edition of Qingdao Yiqi Tianchuang Management Consulting Co. An attacker can exploit this vulnerability to obtain sensitive information...

Arbitrary File Read Vulnerability in CLTPHP Open Source Edition

CLTPHP content management system is an efficient site-building PHP content management system , but also an open source CMS system . CLTPHP open source version of the existence of arbitrary file reading vulnerability , an attacker can exploit the vulnerability to read any file on the server...

Arbitrary File Deletion Vulnerability in CLTPHP Open Source Edition

CLTPHP content management system is an efficient site-building PHP content management system , but also an open source CMS system . CLTPHP open source version of the arbitrary file deletion vulnerability, an attacker can exploit the vulnerability on the integrity of the system...

CVE-2019-5915

Open redirect vulnerability in OpenAM Open Source Edition 13.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page...

CVE-2019-5915

OpenAM (Open Source Edition) 13.0 is affected by CVE-2019-5915, a open redirect vulnerability. A specially crafted page can cause users to be redirected to arbitrary websites, enabling phishing. Root cause is an open redirect in the OpenAM 13.0 flow. Mitigation: apply the patch released by the Op...

CVE-2018-0696: Weak Password Recovery Mechanism for Forgotten Password

OpenAM Open Source Edition 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors...

CVE-2019-5915: URL Redirection to Untrusted Site

Open redirect vulnerability in OpenAM Open Source Edition 13.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted page...

OpenAM (Open Source Edition) vulnerable to open redirect

Overview OpenAM Open Source Edition contains an open redirect vulnerability. Norihito Aimoto of Open Source Solution Technology Corporation reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developers. Impact When accessing a specially crafted page, the user may be redirect...

JVN#43193964: OpenAM (Open Source Edition) vulnerable to open redirect

OpenAM Open Source Edition contains an open redirect vulnerability. Impact When accessing a specially crafted page, the user may be redirected to an arbitrary website. As a result, the user may become a victim of a phishing attack. Solution Apply the Patch Patch for this vulnerability has been...

Oracle GlassFish Open Source Edition Remote Monitoring Vulnerability

Oracle GlassFish is the United States Oracle Oracle company to achieve a jsp and other applications such as server software. Oracle GlassFish Open Source Edition is its open source version. Oracle GlassFish Open Source Edition 5.0 version of the demonstration function has a security vulnerability...

CVE-2018-14324: Use of Hard-coded Credentials

The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account. This allows remote attackers to obtain potentially sensitive information, perform database operations, or manipulate the demo via a JMX RMI session, aka a...

OpenAM Authentication Bypass Vulnerability

ForgeRock OpenAM Open Source Edition is the United States ForgeRock company's set of open source single sign-on framework SSO, which provides core identity services Core Server to achieve a transparent single sign-on in a network architecture such as centralized, distributed single sign-on. A...

CVE-2017-10873: Improper Authentication

OpenAM Open Source Edition allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM Open Source Edition implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext...

OpenAM (Open Source Edition) vulnerable to authentication bypass

Overview OpenAM Open Source Edition contains an authentication bypass vulnerability. Yasushi Iwakata of Open Source Solution Technology Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A user may...

Cicada Knowledge Enterprise Portal open source version 6.5 suffers from cross-site scripting vulnerabilities

Cicada Knowledge Enterprise Portal System is an enterprise portal system designed for enterprise marketing use. Cicada Knowledge Enterprise Portal Open Source Edition 6.5 suffers from a cross-site scripting vulnerability, which can be exploited by attackers to insert malicious js code and obtain...

Oracle GlassFish Server Open Source Edition Licensing Issues Vulnerability

Oracle GlassFish Server Open Source Edition is the United States Oracle Oracle company's set of open source version of the server used to build Java EE server-side Java applications. A security vulnerability exists in Oracle GlassFish Server Open Source Edition version 3.0.1 build 22. An attacker...