CVE-2020-19915

Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...

CVE-2021-24585

The Timetable and Event Schedule WordPress plugin before 2.4.0 outputs the Hashed Password, Username and Email Address along other less sensitive data of the user related to the Even Head of the Timeslot in the response when requesting the event Timeslot data with a user with the editposts...

PT-2021-10418

Name of the Vulnerable Software and Affected Versions: WUZHI CMS version 4.1.0 Description: A Cross Site Scripting XSS issue exists in the software, specifically via the mailbox username in the "index.php" endpoint. This allows for potential malicious script execution. Recommendations: For WUZHI...

CVE-2020-19915: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability exists in WUZHI CMS 4.1.0 via the mailbox username in index.php...

Wuzhi WUZHI CMS 跨站脚本漏洞

WUZHI CMS is a PHP and MySQL based Content Management System CMS from Beijing WuZHI Technology Co. The vulnerability can be exploited by remote attackers to perform cross-site scripting attacks via the "email username" parameter in "index.php"...

CVE-2021-41395

Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username...

CVE-2021-41395

Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username...

CVE-2021-41395

Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username...

CVE-2021-41395

Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username...

CVE-2021-41395

Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username...

CVE-2021-41395: Undefined Security Weakness

Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username...

PT-2021-23293

Name of the Vulnerable Software and Affected Versions Teleport versions prior to 6.2.12 Teleport versions 7.x prior to 7.1.1 Description The issue allows attackers to control a database connection string, in some situations, via a crafted database name or username. Recommendations For Teleport...

Teleport 安全漏洞

Teleport is an identity-aware, multi-protocol access agent from Teleport USA, Inc. Used by engineers and security professionals to unify access to SSH servers, Kubernetes clusters, web applications and databases across all environments.Teleport suffers from a security vulnerability that could be...

CVE-2021-29842

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202...

CVE-2021-29842

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202...

Code injection

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202...

CVE-2021-29842

CVE-2021-29842 affects IBM WebSphere Application Server (traditional and Liberty): WAS 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3–21.0.0.9 allow remote username enumeration due to differing responses for valid vs. invalid login attempts. Remediation per IBM bullets is to upgrade to Liberty 21.0.0_10...

CVE-2021-29842

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202...

Pimcore username enumeration vulnerability

Pimcore is a comprehensive open source enterprise platform for master data management PIM/MDM, user experience management CMS/UX, digital asset management DAM, and e-commerce.A username enumeration vulnerability exists in versions of Pimcore prior to 10.1.3. An attacker could exploit this...

CVE-2021-29842: Improper Restriction of Excessive Authentication Attempts

IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 205202...