1260 matches found
CVE-2019-25149
The Gallery Images Ape plugin for WordPress is vulnerable to Arbitrary Plugin Deactivation in versions up to, and including, 2.0.6. This allows authenticated attackers with any capability level to deactivate any plugin on the site, including plugins necessary to site functionality or security...
Exploit for Missing Authentication for Critical Function in Ic Realtime_Icip-P2012T_Firmware
CVE-2023-31594 IC Realtime ICIP-P2012T is vulnerable to Incorr...
Jenkins Plugin SAML Single Sign On(SSO) 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
PYSEC-2023-70
A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter...
CVE-2023-25070
Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator's communication to the product...
CVE-2023-29106
A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 All versions = V2.0 = V2.0 V2.1. The export endpoint is accessible via REST API without authentication. This could allow an unauthenticated remote attacker to download the files available via the endpoint...
bumsys 跨站脚本漏洞
bumsys is an open source project called Business Management System by unilogies individual developers. A cross-site scripting vulnerability exists in versions of bumsys prior to 2.2.0, which stems from a stored cross-site scripting XSS vulnerability...
Fortinet FortiADC 路径遍历漏洞
Fortinet FortiADC is an application delivery controller from Fortinet. A security vulnerability exists in FortiADC version 7.2.0 and versions prior to 7.1.1 that stems from the presence of a relative path traversal, which allows a privileged attacker to remove arbitrary directories from the...
Acronis Cyber Infrastructure 安全漏洞
Acronis Cyber Infrastructure is a simple, efficient and secure solution for edge workloads from Acronis Switzerland. A security vulnerability exists in versions prior to Acronis Cyber Infrastructure 5.2.0-135, which stems from the disclosure of sensitive information due to a CORS misconfiguration...
PT-2023-9951 · WordPress · Kau-Boy Backend Localization Plugin
Name of the Vulnerable Software and Affected Versions: Kau-Boy Backend Localization Plugin version 2.0 Description: A problematic vulnerability has been found in the Kau-Boy Backend Localization Plugin on WordPress, affecting the function backend localization admin settings/backend localization...
Froxlor 代码问题漏洞
Froxlor is a lightweight server management software from the Froxlor team. A code issue vulnerability exists in Froxlor versions prior to 2.0.14, which stems from the presence of unrestricted uploads of dangerous types of files...
CVE-2023-21769 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
...
CVE-2023-25041
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Cththemes Monolit theme = 2.0.6 versions...
CVE-2023-28727
Panasonic AiSEG2 versions 2.00J through 2.93A allows adjacent attackers bypass authentication due to mishandling of X-Forwarded-For headers...
Generex UPS CS141 代码问题漏洞
The Generex UPS CS141 is a microcomputer from the German company Generex. A security vulnerability exists in the Generex UPS CS141 prior to version 2.06, which stems from a vulnerability that allows an attacker to upload a firmware file containing a webshell...
Veritas Technologies Veritas NetBackup 数据伪造问题漏洞
Veritas Technologies Veritas NetBackup is a powerful enterprise-class data backup management software from Veritas Technologies, USA. A security vulnerability exists in Veritas Technologies Veritas NetBackup IT Analytics version 11 prior to 11.2.0, which stems from an application upgrade process...
SAP BusinessObjects Business Intelligence Platform 代码问题漏洞
SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. A code issue vulnerability exists in SAP BusinessObjects Business...
SAP BusinessObjects Business Intelligence Platform 代码问题漏洞
SAP BusinessObjects Business Intelligence Platform is a complete business analytics platform from SAP. The platform combines market-leading SAP data integration products, data management products, and business intelligence BI products to eliminate system integration challenges and enable fast, ea...
PT-2023-19779 · Funadmin · Funadmin
Name of the Vulnerable Software and Affected Versions: Funadmin version 3.2.0 Description: The issue is a SQL injection vulnerability that can be exploited via the id parameter at the "/databases/database/edit" API endpoint. This allows for potential unauthorized access and manipulation of databa...