PT-2023-16021 · Netis · Netis Netcore Router

Name of the Vulnerable Software and Affected Versions: Netis Netcore Router versions up to 2.2.6 Description: A vulnerability was found in the Netis Netcore Router, affecting an unknown functionality of the file param.file.tgz of the component Backup Handler. This leads to information disclosure...

AZL-45126 CVE-2017-20162 affecting package js-jquery 3.5.0-4

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has...

AZL-45201 CVE-2017-20162 affecting package nodejs-nodemon 2.0.3-5

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has...

CVE-2022-43525

Multiple vulnerabilities within the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary...

PT-2023-12406 · Slackero · Phpcms

Name of the Vulnerable Software and Affected Versions: slackero phpwcms versions up to 1.9.26 Description: A vulnerability was found in the SVG File Handler component of slackero phpwcms, which can be exploited to lead to cross site scripting. The manipulation can be initiated remotely...

UBUNTU-CVE-2022-0801

Inappropriate implementation in HTML parser in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to bypass XSS preventions via a crafted HTML page. Chrome security severity: Medium...

The vulnerability of the isteven-multi-select component of the Portainer management platform allows attackers to perform cross-site scripting attacks.

The vulnerability of the isteven-multi-select component of the Portainer container management platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

PT-2022-28124 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress affected versions not specified Description: A problematic issue has been found in FlatPress, affecting some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scriptin...

CVE-2022-4638 collective.contact.widget widgets.py title cross site scripting

A vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the...

DEBIAN-CVE-2021-4249

A vulnerability was found in xml-conduit. It has been classified as problematic. Affected is an unknown function of the file xml-conduit/src/Text/XML/Stream/Parse.hs of the component DOCTYPE Entity Expansion Handler. The manipulation leads to infinite loop. It is possible to launch the attack...

CVE-2022-4596 Shoplazza Add Blog Post cross site scripting

A vulnerability, which was classified as problematic, has been found in Shoplazza 1.1. This issue affects some unknown processing of the file /admin/api/admin/articles/ of the component Add Blog Post Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be...

PT-2022-27657 · Opencaching Deutschland · Opencaching Deutschland Oc-Server3

Name of the Vulnerable Software and Affected Versions: Opencaching Deutschland oc-server3 affected versions not specified Description: A problematic vulnerability has been found in Opencaching Deutschland oc-server3, affecting the Cookie Handler component, specifically an unknown part of the file...

PT-2022-27658 · Opencaching Deutschland · Oc-Server3

Name of the Vulnerable Software and Affected Versions: Opencaching Deutschland oc-server3 affected versions not specified Description: A problematic vulnerability was found in the Cachelist Handler component, specifically in the file htdocs/templates2/ocstyle/cachelists.tpl. The manipulation of t...

PT-2022-27449 · Roots · Roots Soil Plugin

Name of the Vulnerable Software and Affected Versions: Roots soil Plugin versions prior to 4.1.1 Description: A problematic issue was found in the Roots soil Plugin, affecting the language attributes function of the file src/Modules/CleanUpModule.php. The manipulation of the language argument lea...

SUSE SLES12 Security Update : osc (SUSE-SU-2022:4351-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4351-1 advisory. osc was updated to version 0.182.0 bsc1154972, bsc1144211, bsc1142662, bsc1140697, bsc1138165: - Added MFA support jscOBS-203. -...

PT-2022-26491 · Sourcecodester · Sourcecodester Canteen Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Canteen Management System affected versions not specified Description: A vulnerability was found in the SourceCodester Canteen Management System, affecting the builtin echo function of the customer.php file. This issue leads to...

PT-2022-26352 · Unknown · Sourcecodester Book Store Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Book Store Management System version 1.0 Description: A problematic vulnerability has been found in the SourceCodester Book Store Management System. This issue affects an unknown part of the file /bsms ci/index.php/user/edit...

PT-2022-25611 · Unknown · Rickxy Stock Management System

Name of the Vulnerable Software and Affected Versions: rickxy Stock Management System affected versions not specified Description: A vulnerability was found in the rickxy Stock Management System, affecting unknown code in the file /pages/processlogin.php. The manipulation of the user argument lea...

USN-5658-3 isc-dhcp vulnerabilities

USN-5658-1 fixed several vulnerabilities in DHCP. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that DHCP incorrectly handled option reference counting. A remote attacker could possibly use this issue to cause DHCP servers to cras...

The vulnerability in the web interface for controlling the Cisco AsyncOS operating system of the Cisco Email Security Appliance, as well as in the Cisco Secure Email and Web Manager, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability in the web interface for controlling the Cisco AsyncOS operating system of the Cisco Email Security Appliance ESA and the Cisco Secure Email and Web Manager devices relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious...