12571 matches found
JVN#65171386: Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR
ID Link Manager and FUJITSU Software TIME CREATOR provided by Fsas Technologies Inc. contain multiple vulnerabilities listed below. Path Traversal CWE-36 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Base Score 8.6 CVE-2024-33620 Missing Authentication CWE-306...
Fujitsu ID Link Manager and Fujitsu TIME CREATOR Security Vulnerability
Fujitsu ID Link Manager and Fujitsu TIME CREATOR are both products of Fujitsu, Japan.Fujitsu ID Link Manager is an ID manager.Fujitsu TIME CREATOR is a business content management software. A security vulnerability exists in Fujitsu ID Link Manager and Fujitsu TIME CREATOR. An attacker could...
PT-2024-4406 · Unknown · Alton Management System
Name of the Vulnerable Software and Affected Versions: Loan Management System version 1.0 Description: A critical vulnerability was found in the Loan Management System, affecting the file login.php of the Login Page component. The manipulation of the username argument leads to SQL injection. The...
PT-2024-4404 · Itsourcecode · Itsourcecode Banking Management System
Name of the Vulnerable Software and Affected Versions: itsourcecode Banking Management System version 1.0 Description: A critical issue was found in the Banking Management System, affecting an unknown functionality of the file admin class.php. The manipulation of the username argument leads to SQ...
PT-2024-37405 · Unknown · Spa-Cartcms
Name of the Vulnerable Software and Affected Versions: spa-cartcms version 1.9.0.6 Description: A problematic issue was found in the Username Handler component, specifically in the /login file, where manipulating the email argument leads to observable behavioral discrepancy. This issue can be...
PT-2024-25651 · Fujitsu · Fujitsu Software Time Creator
Name of the Vulnerable Software and Affected Versions: ID Link Manager affected versions not specified FUJITSU Software TIME CREATOR affected versions not specified Description: The issue allows an unauthenticated remote attacker to determine if a username is valid or not by exploiting an...
SPA-CART CMS 1.9.0.6 Username Enumeration / Business Logic Flaw
Exploit Title: Business Logic Flaw and Username Enumeration in spa-cartcmsv1.9.0.6 Date: 6/2024 Exploit Author: Andrey Stoykov Version: 1.9.0.6 Tested on: Ubuntu 22.04 Blog: https://msecureltd.blogspot.com/2024/04/friday-fun-pentest-series-5-spa.html Description - It was found that the applicatio...
The vulnerability of the /usr/bin/pppd component of the TP-Link Omada ER605 VPN router’s microprogramming software allows a malicious actor to execute arbitrary code under the root user context.
The vulnerability of the /usr/bin/pppd component of the TP-Link Omada ER605 VPN router software exists due to the lack of measures taken to neutralize specific elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code under the...
CVE-2024-38465
Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error...
CVE-2024-38465
Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error...
Shenzhen Guoxin Synthesis image system security vulnerability
Shenzhen Guoxin Synthesis image system is an image system from Shenzhen Guoxin Synthesis, a company based in Shenzhen, China. A security vulnerability exists in the Shenzhen Guoxin Synthesis image system, version prior to 8.3.0, which stems from a discrepancy in the error response that allows...
CVE-2024-38465
Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error...
PT-2024-28019 · Shenzhen Guoxin · Shenzhen Guoxin Synthesis Image System
Name of the Vulnerable Software and Affected Versions: Shenzhen Guoxin Synthesis image system versions prior to 8.3.0 Description: The issue allows username enumeration due to a response discrepancy between incorrect and error responses. Recommendations: For versions prior to 8.3.0, update to...
CVE-2024-38465
Shenzhen Guoxin Synthesis image system before 8.3.0 allows username enumeration because of the response discrepancy of incorrect versus error...
CVE-2024-38465
The CVE-2024-38465 affects Shenzhen Guoxin Synthesis image system prior to version 8.3.0. The vulnerability arises from a response discrepancy between incorrect and error responses, enabling username enumeration. Affected component is the image system software; root cause is inconsistent error ha...
CVE-2024-5985
A vulnerability classified as critical has been found in SourceCodester Best Online News Portal 1.0. This affects an unknown part of the file /admin/index.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
Best Online News Portal SQL Injection Vulnerability
Best online news portal is an online news portal by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Best Online News Portal version 1.0, which originates when /admin/index.php contains some unknown functions that cause SQL injection via the parameter usernam...
PT-2024-37294 · Unknown · Sourcecodester Best Online News Portal
Name of the Vulnerable Software and Affected Versions: SourceCodester Best Online News Portal version 1.0 Description: A critical vulnerability has been found in the software, affecting an unknown part of the file /admin/index.php. The manipulation of the username argument leads to SQL injection...