15847 matches found
PT-2021-23558 · Sqlite Consortium +2 · Sqlite +2
Name of the Vulnerable Software and Affected Versions: The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite affected versions not specified Description: The issue concerns a remote SQL injection bypass authentication vulnerability for the admin account. The username parameter fr...
VulnCheck KEV: CVE-2021-42258
BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution...
PT-2021-23615
Name of the Vulnerable Software and Affected Versions Product affected versions not specified Description The issue allows all users access to read global variables, resulting in the disclosure of peer username and password. Recommendations At the moment, there is no information about a newer...
CVE-2021-42536: Exposure of Sensitive Information to an Unauthorized Actor
The affected product is vulnerable to a disclosure of peer username and password by allowing all users access to read global variables...
CVE-2021-42169: Improper Neutralization of Special Elements used in an SQL Command
The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter username from the login form is not protected correctly and there is no security and escaping fr...
PT-2021-11609
Name of the Vulnerable Software and Affected Versions: Foxlor version 0.10.16 Description: The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the name, firstname, or username input fields in the Customer Add module. This enables the execution of...
CVE-2020-28968: Improper Neutralization of Input During Web Page Generation
Draytek VigorAP 1000C contains a stored cross-site scripting XSS vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username input field...
Gigabyte Allegedly Hit by AvosLocker Ransomware
The AvosLocker ransomware gang is claiming that it breached tech giant Gigabyte and has leaked a sample of what it claims are files stolen from the Taiwanese company’s network. It’s offering to sell the rest. On Wednesday, the gang posted a “press release” announcing that it had purportedly gutte...
CVE-2021-31366
An Unchecked Return Value vulnerability in the authd authentication daemon of Juniper Networks Junos OS on MX Series configured for subscriber management / BBE allows an adjacent attacker to cause a crash by sending a specific username. This impacts authentication, authorization, and accounting A...
CVE-2021-31366 Junos OS: MX Series: In subscriber management / BBE configuration authd can crash if a subscriber with a specific username tries to login leading to a DoS
An Unchecked Return Value vulnerability in the authd authentication daemon of Juniper Networks Junos OS on MX Series configured for subscriber management / BBE allows an adjacent attacker to cause a crash by sending a specific username. This impacts authentication, authorization, and accounting A...
CVE-2021-35323
Cross Site Scripting XSS vulnerability exists in bludit 3-13-1 via the username in admin/login...
CVE-2021-35323
Cross Site Scripting XSS vulnerability exists in bludit 3-13-1 via the username in admin/login...
CVE-2021-38476
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This may allow an attacker to enumerate different user accounts...
PT-2021-20885
Name of the Vulnerable Software and Affected Versions: bludit version 3-13-1 Description: A Cross Site Scripting XSS issue exists via the username in the "admin/login" API endpoint. Recommendations: For version 3-13-1, avoid using the username variable in the "admin/login" endpoint until the issu...
CVE-2021-38476: Observable Response Discrepancy
InHand Networks IR615 Router's Versions 2.3.0.r4724 and 2.3.0.r4870 authentication process response indicates and validates the existence of a username. This may allow an attacker to enumerate different user accounts...
CVE-2021-35323: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability exists in bludit 3-13-1 via the username in admin/login...
CVE-2018-16061
Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATHINFO to login.php...
CVE-2018-16061
Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATHINFO to login.php...
CVE-2018-16061
Summary: CVE-2018-16061 affects Mitsubishi Electric SmartRTU devices, enabling cross‑site scripting via the username parameter or PATH_INFO to login.php. Root cause: likely lack of proper validation/escaping on login.php inputs (insufficient input sanitization). Impact: XSS in the SmartRTU web in...
