CVE-2023-2950 Improper Authorization in openemr/openemr

Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...

WordPress plugin BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

CVE-2023-2948 Cross-site Scripting (XSS) - Generic in openemr/openemr

Cross-site Scripting XSS - Generic in GitHub repository openemr/openemr prior to 7.0.1...

CVE-2023-2947

Cross-site Scripting XSS - Stored in GitHub repository openemr/openemr prior to 7.0.1...

Supcon SimField 代码问题漏洞

Supcon SimField is an intelligent mobile device monitoring platform from Supcon China. A code issue vulnerability exists in versions of Supcon SimField prior to 1.80.00.00, which stems from a problem with the file /admin/reportupload.aspx, where manipulation of the parameter files can result in...

PT-2023-5358 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.1 Description: The issue is related to missing authorization in the OpenEMR software, which can be exploited by a remote attacker to elevate their privileges. Recommendations: For versions prior to 7.0.1, update ...

PT-2023-18271 · Samsung · Galaxy Store

Name of the Vulnerable Software and Affected Versions: Galaxy Store versions prior to 4.5.49.8 Description: The issue allows attackers to execute javascript API to install APK from Galaxy Store due to a vulnerable script in InstantPlay. This script can execute javascript in Galaxy Store, enabling...

PT-2023-3689 · Hitachi · Hitachi Device Manager

Name of the Vulnerable Software and Affected Versions: Hitachi Device Manager versions prior to 8.8.5-02 Description: The issue is related to the cleartext transmission of sensitive information in Hitachi Device Manager, affecting components such as Device Manager Server, Device Manager Agent, an...

Nextcloud 代码问题漏洞

Nextcloud is an open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud server, which stems from a session handling regression between Nextcloud Server and the Nextcloud Text application tha...

PT-2023-18804 · Bottle · Bottle

Name of the Vulnerable Software and Affected Versions: Bottles versions prior to 51.0 Description: The issue is related to the mishandling of YAML load, which can be exploited for remote code execution via a crafted file. Recommendations: For versions prior to 51.0, update to version 51.0 or late...

CBOT Chatbot 安全特征问题漏洞

CBOT Chatbot is an AI-powered real-time chat solution from CBOT. A security signature issue vulnerability exists in CBOT Chatbot Core prior to v4.0.3.4, Panel prior to v4.0.3.7, which stems from the use of Cryptographically Weak Pseudo-Random Number Generator PRNG, which allows signature spoofing...

c-ares 资源管理错误漏洞

c-ares is a C library for asynchronous DNS requests from the individual developers of c-ares. A security vulnerability exists in c-ares versions prior to 1.19.1, which stems from vulnerability to denial-of-service attacks...

PT-2023-14224 · Unknown · Xwp Stream

Name of the Vulnerable Software and Affected Versions: XWP Stream plugin versions prior to 3.9.2 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

Liferay Portal和Liferay DXP 跨站脚本漏洞

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

Briar 资源管理错误漏洞

Briar is an open source software communication technology from Briar Open Source. It is designed to provide secure and resilient peer-to-peer communications that operate without a central server and minimize external dependencies. A security vulnerability exists in Briar versions prior to 1.4.22...

CVE-2023-2859 Code Injection in nilsteampassnet/teampass

Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9...

Contec SolarView Compact 操作系统命令注入漏洞

Contec SolarView Compact is an application system from Contec Japan. It provides measurement system for photovoltaic power generation. A security vulnerability exists in Contec SolarView Compact SV-CPT-MC310 Ver.8.10 prior and SV-CPT-MC310F Ver.8.10 prior, which stems from the presence of an...

PT-2023-21722 · Unknown · Cloudexplorer Lite

Name of the Vulnerable Software and Affected Versions: cloudexplorer-lite versions prior to 1.1.0 Description: The issue concerns a missing authorization in the cloudexplorer-lite GitHub repository. This allows for an authorization bypass through a user-controlled key. Recommendations: For versio...

Finex Media Competition Management System 安全漏洞

Finex Media Competition Management System is a media competition management application. A security vulnerability exists in Finex Media Competition Management System versions prior to 23.07. An attacker can exploit this vulnerability to bypass authentication...

Finex Media Competition Management System 安全漏洞

Finex Media Competition Management System is a media competition management application. A security vulnerability exists in Finex Media Competition Management System versions prior to 23.07. An attacker can exploit this vulnerability to retrieve embedded sensitive data and collect user-supplied...