PT-2023-28056 · Unknown · Chengdu Flash Flood Disaster Monitoring/Warning System

Name of the Vulnerable Software and Affected Versions: Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0 Description: A problematic issue was found in the Chengdu Flash Flood Disaster Monitoring and Warning System. This issue affects the file ServiceFileDownload.ashx and is...

Chengdu Flash Flood Disaster Monitoring and Warning System Path Traversal Vulnerability

Chengdu Flash Flood Disaster Monitoring and Warning System is a flash flood disaster monitoring and warning system for Chengdu. A security vulnerability exists in Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0, which stems from an incorrect operation of the parameter...

Cute Http File Server Cross-Site Scripting Vulnerability

Cute Http File Server is a free, HTTP protocol file sharing server for iscute individual developers. A cross-site scripting vulnerability exists in Cute Http File Server version 2.0, which stems from a problem with the component Search that can lead to cross-site scripting...

CVE-2023-33925

Unauth. Reflected Cross-Site Scripting XSS vulnerability in PluginForage WooCommerce Product Categories Selection Widget plugin = 2.0 versions...

Johnson Controls IQ Wifi 6 安全漏洞

Johnson Controls IQ Wifi 6 is a series of WiFi devices from Johnson Controls, Inc. A security vulnerability previously existed in Johnson Controls IQ Wifi 6 version 2.0.2, which stemmed from a brute force authentication attack that could be used by an unauthorized user to gain access to an accoun...

PT-2023-26256 · Unknown · Chengdu Flash Flood Disaster Monitoring/Warning System

Name of the Vulnerable Software and Affected Versions: Chengdu Flash Flood Disaster Monitoring and Warning System version 2.0 Description: A problematic vulnerability has been found in the Chengdu Flash Flood Disaster Monitoring and Warning System. This issue affects an unknown part of the file...

CVE-2023-2852

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Softmed SelfPatron allows SQL Injection. This issue affects SelfPatron : before 2.0...

Softmed SelfPatron SQL注入漏洞

Softmed SelfPatron is an application from Softmed, Inc. An SQL injection vulnerability exists in versions prior to Softmed SelfPatron 2.0, which stems from improper neutralization of special elements...

CVE-2023-36346

POS Codekop v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the nmmember parameter at print.php...

PT-2023-3650 · Unknown · Spidercontrol Scada Web Server

Name of the Vulnerable Software and Affected Versions: SpiderControl SCADA Webserver versions 2.08 and prior Description: The issue exists due to incorrect restriction of the path name to a directory with limited access. Exploitation of this issue may allow a remote attacker to cause a...

Snowflake snowflake-connector-net 命令注入漏洞

Snowflake snowflake-connector-net is the Snowflake Connector for . A command injection vulnerability exists in snowflake-connector-net versions prior to 2.0.18. The vulnerability stems from easy command injection via SSO URL authentication, which can be exploited by an attacker to cause remote co...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop jmsmegamenu version 1.1.x and version 2.0.x. The vulnerability...

CVE-2022-34855

Path traversal for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29104

A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1. The filename in the upload feature of the web based management of the affected device is susceptible to a path traversal vulnerability. This could allow an authenticated privileged remote attacke...

tpm2: TCG TPM2.0 implementations vulnerable to memory corruption

An out-of-bound read vulnerability was found in the TPM 2.0's Module Library, which allows the reading of 2-byte data after the end of the TPM command. This flaw allows an attacker to leak confidential data stored within the libtpms context...

PT-2023-22152 · Siemens · Simatic Cloud Connect 7 Cc712 +1

Name of the Vulnerable Software and Affected Versions: SIMATIC Cloud Connect 7 CC712 versions 2.0 through 2.1 SIMATIC Cloud Connect 7 CC716 versions 2.0 through 2.1 Description: A path traversal vulnerability has been identified in the upload feature of the web-based management of the affected...

PT-2023-22155 · Siemens · Simatic Cloud Connect 7 Cc712 +1

Name of the Vulnerable Software and Affected Versions: SIMATIC Cloud Connect 7 CC712 versions 2.0 through 2.1 SIMATIC Cloud Connect 7 CC716 versions 2.0 through 2.1 Description: A vulnerability has been identified that could allow an unauthenticated remote attacker to gain access to additional...

CVE-2023-23785

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in DgCult Exquisite PayPal Donation plugin = v2.0.0 versions...

Ubiquiti EdgeRouter 命令注入漏洞

The Ubiquiti EdgeRouter is a router from Ubiquiti, Inc. A command injection vulnerability exists in Ubiquiti EdgeRouter X version 2.0.9-hotfix.6 and prior versions, which stems from an incorrect manipulation of the parameter name that can lead to command injection...

Ubiquiti EdgeRouter 命令注入漏洞

The Ubiquiti EdgeRouter is a router from Ubiquiti USA. A command injection vulnerability exists in Ubiquiti EdgeRouter X version 2.0.9-hotfix.6 and prior versions, which stems from the fact that incorrect manipulation of the parameter suffix-rate-up can lead to command injection...