FreeBSD Security Vulnerabilities

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from a denial of service DOS vulnerability in which the pf4 packet filter does not properly validate TCP sequence numbers. Affected products and versions: FreeBSD...

IceCMS Security Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation by NgShow individual developers. A security vulnerability exists in Thecosy IceCMS version 2.0.1, which stems from the presence of unknown code in the application that can be exploited by an attacke...

PT-2023-31604 · Unknown · Cute Http File Server

Name of the Vulnerable Software and Affected Versions: CuteHttpFileServer versions 1.0 through 2.0 Description: A Cross Site Scripting XSS issue allows attackers to obtain sensitive information via the file upload function on the home page. Recommendations: For CuteHttpFileServer versions 1.0 and...

MonicaHQ Security Breach

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version 4.0.0. An attacker can exploit this vulnerability to upload SVG documents that contain cross-site scripting vulnerabilities...

Availability Booking Calendar Cross-Site Scripting Vulnerability

PHPJabbers Availability Booking Calendar is a booking system. A cross-site scripting vulnerability exists in Availability Booking Calendar version 5.0, which originates from a vulnerability that allows an attacker to inject JavaScript injection into index.php...

PT-2023-30980 · Unknown · Car Rental Script

Name of the Vulnerable Software and Affected Versions: Car Rental Script version 3.0 Description: The issue concerns Multiple HTML Injection problems. These issues can be exploited via the SMS API Key or Default Country Code. Recommendations: For Car Rental Script version 3.0, update the software...

PT-2023-30981 · Unknown · Appointment Scheduler

Name of the Vulnerable Software and Affected Versions: Appointment Scheduler version 3.0 Description: The issue concerns Multiple HTML Injection problems. These issues can be exploited via the SMS API Key or Default Country Code. Recommendations: For Appointment Scheduler version 3.0, consider...

PT-2023-9635 · Oracle +4 · Mysql Server +3

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.37 and prior Description: The issue is related to the Server: Pluggable Auth component of Oracle MySQL Server. It allows a high privileged attacker with network access via multiple protocols to compromise the...

PT-2023-32695 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue concerns Business Logic Errors in the microweber/microweber GitHub repository. Unpublished and deleted products can be added to checkout, indicating a flaw in the application'...

GHSA-9WVJ-WR2F-6MX6 Cross-Site Request Forgery in JFinalCMS

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/slide/save...

PT-2023-31201 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A Cross-Site Request Forgery CSRF issue was discovered in JFinalCMS. The vulnerability can be exploited via the /admin/category/update API endpoint. Recommendations: For JFinalCMS version 5.0.0, as a...

JFinalCMS Security Vulnerability

JFinalCMS is a content management system by heyewei individual developer. A security vulnerability exists in JFinalCMS v5.0.0, which originates from a cross-site request forgery vulnerability in the /admin/div/update component...

IceCMS 跨站脚本漏洞

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation . A cross-site scripting vulnerability exists in IceCMS version 2.0.1. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be...

Huddly Camera Service Security Vulnerability

Huddly Camera Service is a connected camera technology from Huddly, Inc. in the United States. A security vulnerability exists in Huddly Camera Service versions prior to 8.0.7 excluding version 7.99, which stems from a DLL hijacking vulnerability due to HuddlyCameraService being installed in a...

CVE-2023-48743

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Paul Menard Simply Exclude allows Reflected XSS.This issue affects Simply Exclude: from n/a through 2.0.6.6...

PT-2023-28378

Name of the Vulnerable Software and Affected Versions Apache Superset versions prior to 3.0.0 Description The issue allows an authenticated malicious user to initiate multiple concurrent requests, each requesting multiple dashboard exports. This could lead to a possible denial of service...

CVE-2023-6254

A Vulnerability in OTRS AgentInterface and ExternalInterface allows the reading of plain text passwords which are send back to the client in the server response- This issue affects OTRS: from 8.0.X through 8.0.37...

OTRS Security Vulnerabilities

OTRS is an application from OTRS Germany. A service management software. A security vulnerability exists in OTRS versions 8.0.X through 8.0.37. An attacker exploiting this vulnerability could read a plain text password sent back to the client in a server response...

Moses Operating System Command Injection Vulnerability

Moses is a statistical machine translation system. An operating system command injection vulnerability exists in Moses mosesdecoder version 4.0 and earlier versions, which stems from the fact that incorrect manipulation of the parameter input1 can lead to operating system command injection...

Open Solutions For Education openSIS Security Vulnerability

Open Solutions For Education openSIS is an open source student information management system from Open Solutions For Education. A security vulnerability exists in Open Solutions For Education openSIS Classic Community Edition v9.0, which stems from a directory traversal vulnerability that allows...