1025 matches found
PT-2022-13136 · Unknown · Livehelperchat
Name of the Vulnerable Software and Affected Versions: LiveHelperChat versions prior to 3.93v Description: The issue is related to a Stored Cross-site Scripting XSS vulnerability. It affects the Name field in the Admin themes of System configuration, allowing for potential malicious script...
kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout
A use-after-free flaw was found in cgroup1parseparam in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service ...
ZOHO ManageEngine Desktop Central Licensing Issue Vulnerability
ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO, Inc. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management...
ZOHO ManageEngine Desktop Centra Remote Code Execution Vulnerability
ZOHO ManageEngine Desktop Central DC is a desktop management solution from ZOHO, Inc. The solution includes software distribution, patch management, system configuration, remote control, and other functional modules to support the entire lifecycle of desktop and server management. properly...
CVE-2021-37112
CVE-2021-37112 concerns the Huawei HarmonyOS Hisuite module, described as an External Control of System or Configuration Setting vulnerability. Exploitation could lead to a firmware leak. Public data across connected sources confirms impact is targeted at the Hisuite component within HarmonyOS wi...
PT-2022-11098 · Unknown · Password Vault
Name of the Vulnerable Software and Affected Versions: Password vault affected versions not specified Description: The password vault has an External Control of System or Configuration Setting issue. Successful exploitation could compromise confidentiality. Recommendations: At the moment, there i...
PT-2022-10619 · Huawei · Hisuite
Name of the Vulnerable Software and Affected Versions: Hisuite module affected versions not specified Description: The issue is related to an External Control of System or Configuration Setting vulnerability. Successful exploitation of this vulnerability may lead to a Firmware leak...
CVE-2021-44877
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability ha...
CVE-2021-44877
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability ha...
Improper access control
Dalmark Systems Systeam 2.22.8 build 1724 is vulnerable to Incorrect Access Control. The Systeam application is an ERP system that uses a mixed architecture based on SaaS tenant and user management, and on-premise database and web application counterparts. A broken access control vulnerability ha...
Cross-Site Request Forgery (CSRF) in livehelperchat/livehelperchat
Description I found one more CSRF at Clean cache in the System tab of System configuration via GET request. Proof of Concept CLICK ME! Impact This vulnerability is capable of tricking admin to clear the cache of the system, that can potential lead to a DoS attack. Remediation Use POST request...
CVE-2021-41242
OpenOlat is a web-basedlearning management system. A path traversal vulnerability exists in OpenOlat prior to versions 15.5.12 and 16.0.5. By providing a filename that contains a relative path as a parameter in some REST methods, it is possible to create directory structures and write files...
Crafter CMS File Overwrite Vulnerability
Crafter CMS is an open source content management system CMS for digital experience applications.A security vulnerability exists in Crafter CMS, which stems from the possibility that an authenticated administrator could override the system configuration file. An attacker could exploit this...
CVE-2021-23261
Authenticated administrators may override the system configuration file and cause a denial of service...
CVE-2021-23261
Authenticated administrators may override the system configuration file and cause a denial of service...
Design/Logic Flaw
Authenticated administrators may override the system configuration file and cause a denial of service...
CVE-2021-23261 Overriding the system configuration file causes a denial of service
Authenticated administrators may override the system configuration file and cause a denial of service...
CVE-2021-23261
Crafter CMS is affected by a vulnerability where an authenticated administrator can override the system configuration file , enabling a denial of service . The description and related entries (CVE-2021-23261, Crafter CMS CNVD/CNNVD references) confirm the root cause as a file overwrite/authentica...
Crafter CMS 安全漏洞
Crafter CMS is an open source content management system CMS for digital experience applications.A security vulnerability exists in Crafter CMS, which stems from the possibility that an authenticated administrator could override the system configuration file. An attacker could exploit this...