Silex Technology DS-600 安全漏洞

The Silex Technology DS-600 is a hardware device from Silex Technology, Inc. designed to easily connect and share USB 3.0 and 2.0 devices over a network. A security vulnerability exists in the Silex Technology DS-600 version v.1.4.1. A remote attacker could exploit the vulnerability to edit devic...

Fortinet FortiNAC 跨站脚本漏洞

Fortinet FortiNAC is a zero-trust access solution from Fortinet. A security vulnerability exists in Fortinet FortiNAC portal UI versions prior to 9.4.1, which stems from improper neutralization of user input. An attacker could exploit this vulnerability to conduct a cross-site scripting attack...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab CE/EE versions 12.8 through 15.2.5,...

Appneta Tcpreplay 缓冲区错误漏洞

Appneta Tcpreplay is a suite of open source utilities for editing and replaying network traffic on UNIX-based operating systems from Appneta, Inc. A security vulnerability exists in Tcpreplay version v4.4.1, which stems from a heap-based buffer overflow contained in parsempls in common/get.c:150 ...

Appneta Tcpreplay 资源管理错误漏洞

Appneta Tcpreplay is a set of open source utilities for editing and replaying network traffic for UNIX-based operating systems from AppNeta Appneta, USA. A security vulnerability exists in Tcpreplay v4.4.1, no information about the vulnerability is available at this time, please keep an eye on...

Tiny File Manager路径遍历漏洞

Tiny File Manager is a web-based open source file manager. A path traversal vulnerability in the tinyfilemanager.php file upload function in Tiny File Manager 2.4.1 allows remote attackers to upload malicious PHP files to the webroot using a valid user account and achieve code execution on the...

HPESBST04254 rev.1 - HPE Fibre Channel and SAN Switches with Brocade Fabric OS (FOS) Prior to v8.0.1b and v7.4.1d, Disclosure of Privileged Information

Potential Security Impact: Remote: Disclosure of Privileged Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE B-series SN6000B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN3600B Fibre Channel Switch -Prior to v8.0.1b HPE B-series SN4000B SAN Extension Switch...

Group Office CRM Cross-Site Scripting Vulnerability (CNVD-2021-29739)

Group Office CRM is a software application. Share projects, calendars, files and emails with colleagues and clients online. Easy to use and fully customizable. A cross-site scripting vulnerability exists in the Contacts page in Group Office CRM version 6.4.196. An attacker can exploit this...

MISP cross-site scripting vulnerability (CNVD-2021-07507)

MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in MISP version 2.4.128. The vulnerability ste...

Bosch PRAESIDEO and Bosch PRAESENSA Cross-Site Scripting Vulnerabilities

Bosch Praesideo and Bosch Praesensa are both products of Bosch, Germany.Bosch Praesideo is a device for digital broadcasting in public places. The device can provide daily information dissemination, emergency broadcasting, fire alarm and other functions for buildings and public places.Bosch...

Zammad Information Disclosure Vulnerability (CNVD-2020-75060)

Zammad is a Web-based open source helpdesk/customer support system. An information disclosure vulnerability exists in Zammad versions prior to 3.4.1. The vulnerability stems from the way Massenversand's implementation of the SMS configuration interface presents the results of test requests to the...

FusionPBX Cross-Site Scripting Vulnerability (CNVD-2019-43413)

FusionPBX is an open source enterprise IPPBX interface management system based on FreeSWITHC. A cross-site scripting vulnerability exists in app/dialplans/dialplandetailedit.php in FusionPBX 4.4.1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the...

TYPO3 Encryption Problem Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A security vulnerability exists in TYPO3 versions prior to 4.3.4 and 4.4.x prior to 4.4.1. An attacker can exploit the vulnerability to brute-force hash values...

Zucchetti InfoBusiness Code Execution Vulnerability (CNVD-2019-39372)

Zucchetti InfoBusiness is a business intelligence solution that uses multiple data to generate reports to measure company trends. A code execution vulnerability exists in Zucchetti InfoBusiness 4.4.1 and earlier versions. An attacker can exploit this vulnerability to achieve code execution by...

PT-2017-11789 · Pcre +2 · Pcre +2

Name of the Vulnerable Software and Affected Versions: PCRE version 8.41 Description: The issue allows stack exhaustion due to uncontrolled recursion when processing a crafted regular expression, specifically through the OP KETRMAX feature in the match function in pcre exec.c. Recommendations: Fo...

UPM Doesn't Migrate Local User Profiles Since Version 5.4.1

In UPM 5.4.1 and later versions, UPM doesn't migrate local user profiles to UPM store. Then users who are using local profile is unable to retain their personal settings by UPM...

Unspecified Vulnerability in Oracle Supply Chain Products Suite Oracle Transportation Management Component

Oracle Supply Chain Products Suite is a suite of supply chain solutions from Oracle that provides value chain planning, value chain execution, product lifecycle management, etc. Oracle Transportation Management OTM is one of the components that can be used to manage all transportation activities...

PT-2015-4326 · Pivotal +1 · Rabbitmq

Name of the Vulnerable Software and Affected Versions: RabbitMQ versions 2.1.0 through 3.4.x Description: A CRLF injection issue exists in the management plugin, allowing remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the download parameter to th...