多款Siemens产品代码问题漏洞

Desigo DXR2 controllers are programmable automation stations to support the standard control needs of end HVAC equipment and TRA Total Room Automation applications. the Desigo PXC3 series of automation stations can be used in buildings where functionality and flexibility are more demanding. Use...

CVE-2022-22782: Undefined Security Weakness

The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local...

Remote Code Execution (RCE)

HotelDruid is vulnerable to remote code execution. The vulnerability exists due to a lack of sanitization allowing an attacker to insert a maliciously crafted payload into the name field under the Create New Room module...

CVE-2022-27299

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php...

CVE-2022-27299

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the component room.php...

Vulnerabilities fixed in Cisco products

Vulnerabilities have been fixed in several Cisco products. The vulnerabilities allow a malicious party to carry out attacks execute attacks that potentially result in the following categories of damage: Cross-Site Request Forgery XSRF. Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation ...

CVE-2022-1007

The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the room parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue...

CVE-2022-1007

The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the room parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue...

CVE-2022-1007: Improper Neutralization of Input During Web Page Generation

The Advanced Booking Calendar WordPress plugin before 1.7.1 does not sanitise and escape the room parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue...

PT-2022-13588

Name of the Vulnerable Software and Affected Versions Advanced Booking Calendar WordPress plugin versions prior to 1.7.1 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the room parameter is not properly sanitised and escaped before being outputted...

WordPress plugin advanced-booking-calendar 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress advanced-booking-calendar plugin versions pri...

Barco Control Room Management Suite Directory Traversal Vulnerability

I. SUMMARY Title: CVE-2022-2623 Barco Control Room Management Suite File Path Traversal Vulnerability Product: Barco Control Room Management Suite before 2.9 build 0275 and all prior versions Vulnerability Type: File Path Traversal Credit by/Researcher: Murat Aydemir from Accenture Cyber Security...

Barco Control Room Management Suite Directory Traversal

I. SUMMARY Title: CVE-2022-2623 Barco Control Room Management Suite File Path Traversal Vulnerability Product: Barco Control Room Management Suite before 2.9 build 0275 and all prior versions Vulnerability Type: File Path Traversal Credit by/Researcher: Murat Aydemir from Accenture Cyber Security...

CVE-2022-26233

Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the "GET /...." substring...

CVE-2022-26233

Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the "GET /...." substring...

CVE-2022-26233

Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the "GET /...." substring...

CVE-2022-26233

CVE-2022-26233 affects Barco Control Room Management Suite prior to or equal to 2.9 Build 0275. The vulnerability is a local file inclusion/directory traversal (LFI) where inputs from URLs are not properly sanitized, allowing an attacker to read sensitive files. The attack vector described is a c...

Barco Control Room 路径遍历漏洞

Barco Control Room is a visualization and collaboration solution from Barco Belgium. It is used to build control rooms. A path traversal vulnerability exists in Barco Control Room Management Suite version 2.9 Build 0275 and prior versions. The vulnerability allows an attacker to access sensitive...

CVE-2022-26233: Improper Limitation of a Pathname to a Restricted Directory

Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the "GET /...." substring...

PT-2022-17729

Name of the Vulnerable Software and Affected Versions Barco Control Room Management through Suite 2.9 Build 0275 Description The issue allows attackers to access sensitive information and components through directory traversal. Requests must begin with the "GET /...." substring, enabling access t...