4001 matches found
OTRS 跨站脚本漏洞
OTRS is an application from OTRS Germany. A service management software. A security vulnerability exists in OTRS versions 7.0.X prior to 7.0.32 and 8.0.X prior to 8.0.13, which stems from an incorrect input validation vulnerability that could allow an attacker to inject javascript code into...
OTRS 注入漏洞
OTRS is an application from OTRS Germany. A service management software. A security vulnerability exists in OTRS versions 7.0.X prior to 7.0.45 and 8.0.X prior to 8.0.35, which stems from the presence of an incorrect input validation vulnerability that allows any authenticated attacker to perform...
HPESBMU04496 rev.1 - HPE IceWall Identity Manager, Denial Of Service (DOS)
Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall Identity Manager 5.0 RHEL and HP-UX and 6.0 RHEL and Windows - using Apache Commons FileUpload CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...
PT-2023-26256 · Unknown · Chengdu Flash Flood Disaster Monitoring/Warning System
Name of the Vulnerable Software and Affected Versions: Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0 Description: A problematic vulnerability has been found in the Chengdu Flash Flood Disaster Monitoring and Warning System. This issue affects an unknown part of the file...
Bug Finder Foody Friend 代码问题漏洞
Bug Finder Foody Friend is a SAAS-based web application ordering bot from Bug Finder, Inc. A code issue vulnerability exists in Bug Finder Foody Friend version 1.0, which stems from the parameter profilepicture in the file /user/profile that causes unrestricted uploads...
Dell Wyse Management Suite 授权问题漏洞
Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, USA. The product includes centralized management of Wyse endpoints, asset tracking and automated device discovery. A security bypass vulnerability exists in prior versions of Wyse Management Suite...
Bug Finder ChainCity Real Estate Investment Platform SQL注入漏洞
Bug Finder ChainCity Real Estate Investment Platform is a real estate investment platform from Bug Finder, Inc. A SQL injection vulnerability exists in Bug Finder ChainCity Real Estate Investment Platform version 1.0, which stems from the parameter name of the component GET Parameter Handler that...
Wifi Soft Unibox Administration SQL注入漏洞
Wifi Soft Unibox Administration is a smart access controller and hotspot gateway from Wifi Soft USA. It provides complete control over wired and wireless networks. A SQL injection vulnerability exists in Wifi Soft Unibox Administration versions 3.0 and 3.1, which originates from unverified or...
CVE-2023-32635
XBRL data create application version 7.0 and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XBRL file, arbitrary files on the system may be read by an attacker...
tduck-platform 跨站脚本漏洞
TDuckCloud tduck-platform is an open source form survey system from China Zhongda Numerical Wei Information Technology Limited TDuckCloud company. A security vulnerability exists in version v4.0 of tduck-platform, which stems from the presence of an arbitrary file upload vulnerability that allows...
AZL-27467 CVE-2023-22046 affecting package mysql for versions less than 8.0.34-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
UBUNTU-CVE-2023-22056
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2023-35818
An issue was discovered on Espressif ESP32 3.0 ESP32rev300 ROM devices. An EMFI attack on ECO3 provides the attacker with a capability to influence the PC value at the CPU context level, regardless of Secure Boot and Flash Encryption status. By using this capability, the attacker can exploit...
CVE-2023-35089
Cross-Site Request Forgery CSRF vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes plugin = 8.0.7 versions...
WordPress plugin AN_GradeBook SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
CVE-2023-37599
An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory...
Microsoft Visual Studio和Microsoft .NET 安全漏洞
Microsoft Visual Studio is a family of development tool suites and a fundamentally complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET is a software framework dedicated to agile software development, rapid application development,...
CVE-2023-2852
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Softmed SelfPatron allows SQL Injection. This issue affects SelfPatron : before 2.0...
Softmed SelfPatron SQL注入漏洞
Softmed SelfPatron is an application from Softmed, Inc. An SQL injection vulnerability exists in versions prior to Softmed SelfPatron 2.0, which stems from improper neutralization of special elements...