1147 matches found
Information disclosure
Microprogram’s parking lot management system is vulnerable to sensitive information exposure. An unauthorized remote attacker can input specific URLs to acquire partial system configuration information...
CVE-2022-25594 Microprogram parking lot management system - Exposure of Sensitive Information to an Unauthorized Actor
Microprogram’s parking lot management system is vulnerable to sensitive information exposure. An unauthorized remote attacker can input specific URLs to acquire partial system configuration information...
CVE-2022-25594
CVE-2022-25594 concerns Microprogram’s Parking Lot Management System. The vulnerability enables an unauthorized remote attacker to input specific URLs to obtain partial system configuration information, leading to exposure of sensitive data. Documented as a network-accessible issue with low attac...
CVE-2022-25594: Exposure of Sensitive Information to an Unauthorized Actor
Microprogram’s parking lot management system is vulnerable to sensitive information exposure. An unauthorized remote attacker can input specific URLs to acquire partial system configuration information...
Microprogram Parking Lot Management System 安全漏洞
Microprogram Parking Lot Management System is a parking lot management system from the Chinese company Microprogram. A security vulnerability exists in Microprogram Parking Lot Management System V2.2.9.0518.11, which allows an unauthorized remote attacker to enter a specific URL to obtain some...
CVE-2022-22410: Undefined Security Weakness
IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service. IBM X-Force ID: 222763...
OTRS Command Injection Vulnerability
OTRS is an application from the German company OTRS. A service management software. OTRS suffers from a command injection vulnerability that stems from a lack of filtering and escaping of specially crafted strings in the system configuration, which can be exploited by an attacker to execute...
CVE-2021-36100
Specially crafted string in OTRS system configuration can allow the execution of any system command...
CVE-2021-36100
Specially crafted string in OTRS system configuration can allow the execution of any system command...
CVE-2021-36100
Specially crafted string in OTRS system configuration can allow the execution of any system command...
CVE-2021-36100 Authenticated remote code execution
Specially crafted string in OTRS system configuration can allow the execution of any system command...
CVE-2021-36100
CVE-2021-36100 affects OTRS (Open Source Ticket Request System). A specially crafted string in the system configuration can allow arbitrary command execution. Connected sources confirm this vulnerability in OTRS and document remediation: the fix removes configurable system commands from generic a...
CVE-2021-36100
Specially crafted string in OTRS system configuration can allow the execution of any system command...
CVE-2021-36100
Specially crafted string in OTRS system configuration can allow the execution of any system command...
CVE-2021-36100
Specially crafted string in OTRS system configuration can allow the execution of any system command...
CVE-2021-36100: Improper Neutralization of Special Elements used in an OS Command
Specially crafted string in OTRS system configuration can allow the execution of any system command...
OTRS 操作系统命令注入漏洞
OTRS is an application from the German company OTRS. A service management software. OTRS suffers from a command injection vulnerability that stems from a lack of filtering and escaping of specially crafted strings in the system configuration, which can be exploited by an attacker to execute...
PT-2022-10485 · Otrs +3 · Otrs +3
Name of the Vulnerable Software and Affected Versions: OTRS versions affected versions not specified OTRS ITSM versions affected versions not specified OTRS Storm versions affected versions not specified Description: The issue allows the execution of any system command through a specially crafted...
MantisBT Default Credentials (HTTP)
The remote MantisBT instance is using known default credentials for the HTTP login. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...