19003 matches found
PT-2023-6606 · Rockwell Automation · Arena Simulation
Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Simulation affected versions not specified Description: The issue is related to an arbitrary code execution vulnerability in Rockwell Automation's Arena Simulation software. This vulnerability could allow a malicious...
PT-2023-2706 · Microsoft · Windows Backup Service +1
Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to errors in privilege management within the Windows Backup Service, which can be exploited to elevate privileges. This allows an attacker to affect the...
ALSA-2023:2621 Important: mysql security update
MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon mysqld and many client programs and libraries. The following packages have been upgraded to a later upstream version: mysql 8.0.32. BZ2177731, BZ2177732 Security Fixes: mysql: Server: Security:...
CVE-2023-31183
Cybonet PineApp Mail Secure A reflected cross-site scripting XSS vulnerability was identified in the product, using an unspecified endpoint...
CVE-2023-31182
EasyTor Applications – Authorization Bypass - EasyTor Applications may allow authorization bypass via unspecified method...
CVE-2023-31178
AgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete Vulnerability allows arbitrary file deletion, by an unspecified request...
CVE-2023-24506
Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request...
CVE-2023-24505
Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request...
CVE-2023-24507
AgilePoint NX v8.0 SU2.2 & SU2.3 – Insecure File Upload - Vulnerability allows insecure file upload, by an unspecified request...
Cross site scripting
WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting RXSS through an unspecified request...
Cross site scripting
Cybonet PineApp Mail Secure A reflected cross-site scripting XSS vulnerability was identified in the product, using an unspecified endpoint...
Authorization
EasyTor Applications – Authorization Bypass - EasyTor Applications may allow authorization bypass via unspecified method...
Design/Logic Flaw
Milesight NCR/camera version 71.8.0.6-r5 exposes credentials through an unspecified request...
Server side request forgery (ssrf)
Milesight NCR/camera version 71.8.0.6-r5 discloses sensitive information through an unspecified request...
Wjj Software InnoKB 跨站脚本漏洞
Wjj Software InnoKB is a web-based collaborative multi-user knowledge management software tool from Wjj Software. A security vulnerability exists in Wjj Software InnoKB version 2.2.1, which can be exploited by an attacker to cause cross-site scripting via an unspecified request...
CVE-2023-31178 AgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete
AgilePoint NX v8.0 SU2.2 & SU2.3 – Arbitrary File Delete Vulnerability allows arbitrary file deletion, by an unspecified request...
CVE-2023-31183
CVE-2023-31183 affects Cybonet PineApp Mail Secure. A reflected cross-site scripting (XSS) vulnerability identified in the product, involving an unspecified endpoint. The public entries describe the issue but do not specify affected versions, exploit details, or a patch. CVSS 3.1 base score 6.1 (...
CVE-2023-31180 WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting (RXSS)
WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - Reflected cross-site scripting RXSS through an unspecified request...
Cybonet PineApp Mail Secure 跨站脚本漏洞
Cybonet PineApp Mail Secure from Israel's Cybonet blocks most malicious email threats at the network perimeter while providing a range of additional options for comprehensive security and message control. A security vulnerability exists in Cybonet PineApp Mail Secure that stems from the use of...