10989 matches found
WALLIX Access Manager 安全漏洞
WALLIX Access Manager is an access manager from WALLIX France. It filters external access to critical resources by remote employees or third-party vendors, and is also the ideal command center for centralizing the auditing of all Fortress sessions. A security vulnerability exists in WALLIX Access...
CVE-2023-0249
Delta Electronics DIAScreen versions 1.2.1.23 and prior are vulnerable to out-of-bounds write, which may allow an attacker to remotely execute arbitrary code...
CVE-2022-43764
Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code...
Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Cross-Site Request Forgery CSRF in GitHub repository wallabag/wallabag prior to 2.5.4...
PT-2023-1844 · B&R · B&R Aprol
Name of the Vulnerable Software and Affected Versions: B&R APROL versions prior to R 4.2-07 Description: The issue is related to an incorrect check of the return value of a method or function in the Tbase server of the B&R APROL software solution for monitoring industrial systems. This could allo...
answer 跨站脚本漏洞
answer is an open source knowledge-based community software. A cross-site scripting vulnerability exists in answer versions prior to 1.0.4, which stems from the presence of stored cross-site scripting XSS...
BTCPay Server 跨站脚本漏洞
BTCPay Server is a self-hosted open source cryptocurrency payment processor. It is secure, private, uncensored and free. A cross-site scripting vulnerability exists in BTCPay Server versions prior to 1.7.6, which stems from the presence of stored cross-site scripting XSS...
PT-2023-6748 · Dell · Dell Command | Monitor
Name of the Vulnerable Software and Affected Versions: Dell Command | Monitor versions prior to 10.9 Description: The issue is related to inadequate access control in the Dell Command | Monitor software, which can be exploited to delete arbitrary files. A locally authenticated malicious user may...
PT-2023-16499 · Unknown · Btcpay Server
Name of the Vulnerable Software and Affected Versions: btcpayserver/btcpayserver versions prior to 1.7.6 Description: The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into a website, which are then stored on the server and execute...
CVE-2023-0736
Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...
CVE-2023-0703
Type confusion in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via UI interactions. Chromium security severity: Medium...
CVE-2023-0736 Cross-site Scripting (XSS) - Stored in wallabag/wallabag
Cross-site Scripting XSS - Stored in GitHub repository wallabag/wallabag prior to 2.5.4...
CVE-2023-0676 Cross-site Scripting (XSS) - Reflected in phpipam/phpipam
Cross-site Scripting XSS - Reflected in GitHub repository phpipam/phpipam prior to 1.5.1...
PT-2023-19305 · Opendds · Opendds
Name of the Vulnerable Software and Affected Versions: OpenDDS versions prior to 3.23.1 Description: The issue affects OpenDDS applications exposed to untrusted RTPS network traffic, which may cause them to crash when parsing badly-formed input. Recommendations: For versions prior to 3.23.1, upda...
PT-2023-15178 · Unknown · Academy Lms
Name of the Vulnerable Software and Affected Versions: Academy LMS versions prior to 5.10 Description: A Cross-Site Request Forgery CSRF issue allows attackers to arbitrarily add Administrator users. Recommendations: For versions prior to 5.10, update to version 5.10 or later to resolve the issue...
Gurock Software Gurock TestRail 跨站脚本漏洞
Gurock Software Gurock TestRail is a web-based test case management software for QA and development teams from Gurock Software. The software supports the creation of test cases, the management of test suites and the coordination of the testing process. A security vulnerability exists in Gurock...
PT-2023-1349 · Delta Electronics · Diascreen
Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAScreen versions 1.2.1.23 and prior Description: The issue is related to a buffer overflow in memory due to improper restrictions of operations. This could allow an attacker to remotely execute arbitrary code...
YAFNET 跨站脚本漏洞
YAFNET is an ASP.NET open source forum solution for YAFNET individual developers. A cross-site scripting vulnerability exists in YAFNET versions prior to 3.1.11, which stems from unknown handling of the component Signature Handler, resulting in cross-site scripting XSS...
squidex 跨站请求伪造漏洞
squidex is a Headless CMS and Content Management Center. A cross-site request forgery vulnerability exists in squidex versions prior to 7.4.0, which stems from the application's lack of protection against cross-site request forgery CSRF and the inability to validate the implementation of CSRF...
PT-2023-1541 · Delta Electronics · Dopsoft
Name of the Vulnerable Software and Affected Versions: Delta Electronics DOPSoft versions 4.00.16.22 and prior Description: The issue is related to an out-of-bounds write in the DOPSoft software, which could allow an attacker to remotely execute arbitrary code when a malformed file is introduced ...