CVE-2022-2024 OS Command Injection in gogs/gogs

OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11...

PT-2023-20330 · Unknown +2 · Zoneminder +2

Name of the Vulnerable Software and Affected Versions: ZoneMinder versions prior to 1.36.33 Description: The issue concerns ZoneMinder, a free, open source Closed-circuit television software application for Linux. It supports IP, USB, and Analog cameras. Log entries can be injected into the...

AudioCodes Device Manager Express SQL注入漏洞

AudioCodes Device Manager Express is a powerful lifecycle management tool for AudioCodes IP Phones, EPOS and Jabra headsets and speakers from AudioCodes Israel. A SQL injection vulnerability exists in AudioCodes Device Manager Express 7.8.20002.47752 and prior versions, which stems from an...

PT-2023-9203 · Frrouting +8 · Frrouting +8

Name of the Vulnerable Software and Affected Versions: FRRouting versions prior to 8.4.3 Description: The issue is related to the handling of incorrect requests without attributes in the bgpd/bgp flowspec.c file of FRRouting, a Unix-like system network routing implementation tool. This can be...

AudioCodes Device Manager Express 路径遍历漏洞

AudioCodes Device Manager Express is a powerful lifecycle management tool for AudioCodes IP phones, EPOS and Jabra headsets and speakers from AudioCodes Israel. A path traversal vulnerability exists in AudioCodes Device Manager Express 7.8.20002.47752 and prior versions, which stems from a path...

CVE-2022-46784

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. The issue was originally found in 5.5.1 GA...

CVE-2022-2504

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SDD Computer Software SDD-Baro allows SQL Injection. This issue affects SDD-Baro: before 2.8.432...

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A security vulnerability exists in JetBrains TeamCity...

CVE-2023-25813 SQL Injection via replacements in sequelize

Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can lead to arbitrary SQL injection depending on the specific queries in use. The issue has been fix...

CVE-2023-0947

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...

TIBCO Software BusinessConnect 跨站脚本漏洞

TIBCO Software BusinessConnect is a B2B gateway from TIBCO Software, USA. It allows organizations to interact and collaborate with other companies by enabling the secure exchange of documents over the Internet and the automation of private and public business processes. A security vulnerability...

modoboa 跨站脚本漏洞

modoboa is an email hosting and management platform for individual developers. A cross-site scripting vulnerability exists in versions prior to modoboa 2.0.5. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

CVE-2023-0934

Cross-site Scripting XSS - Stored in GitHub repository answerdev/answer prior to 1.0.5...

CVE-2021-32858

esdoc-publish-html-plugin is a plugin for the document maintenance software ESDoc. TheHTML sanitizer in esdoc-publish-html-plugin 1.1.2 and prior can be bypassed which may lead to cross-site scripting XSS issues. There are no known patches for this issue...

PT-2023-16622 · Answerdev · Answer

Name of the Vulnerable Software and Affected Versions: answerdev/answer versions prior to 1.0.5 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository answerdev/answer. Cross-site Scripting XSS is a type of security vulnerability that occurs wh...

PT-2023-16263 · WordPress · Watu Quiz

Name of the Vulnerable Software and Affected Versions: Watu Quiz WordPress plugin versions prior to 3.3.8.2 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page...

CVE-2023-25613

An LDAP Injection vulnerability exists in the LdapIdentityBackend of Apache Kerby before 2.0.3...

Octobox 安全漏洞

Octobox is a tool for managing GitHub notifications. A security vulnerability exists in Octobox PR versions prior to 2807, which originates from a ReDoS vulnerability that can be triggered by a system user providing a specially crafted search query string...

jQuery MiniColors 跨站脚本漏洞

jQuery MiniColors is a small jQuery-based color picker from the individual developer Cory LaViska. A security vulnerability exists in jQuery MiniColors versions prior to 2.3.6, which stems from a cross-site scripting vulnerability that is prone to occur when handling untrusted color names...

PT-2023-12184 · Countly · Countly

Name of the Vulnerable Software and Affected Versions: Countly versions prior to 21.11 Description: The issue allows for cross-site scripting. To exploit this, the victim must follow a malicious link or be redirected from a malicious website. The attacker needs to have an account or be able to...