CVE-2021-30034

Affected software: Remote Clinic UI v2.0 (Remote Clinic v2.0)\nVulnerability: Stored cross-site scripting (XSS) in the Symptoms field on patients/register-report.php, enabling injected script execution via user-provided input.\nRoot cause / vector: Malicious input stored in the Symptoms field is ...

CVE-2021-30044

Cross Site Scripting XSS in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php...

CVE-2021-30042

CVE-2021-30042 describes a stored XSS vulnerability in Remote Clinic v2.0 exploitable via the Clinic Name/Address/City/Contact fields on clinics/register.php. Multiple sources (NVD, Red Hat, CNVD, CVE List) confirm the issue and its impact to inject scripts. Public details do not provide a patche...

CVE-2021-30042

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php...

CVE-2021-30039

CVE-2021-30039 affects Remote Clinic v2.0. The vulnerability is a Cross-Site Scripting (XSS) flaw in the web form fields at patients/register-report.php, specifically the Fever and Blood Pressure fields. Root cause: inadequate input validation/sanitization allowing script injection that can execu...

CVE-2021-30039

Cross Site Scripting XSS in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-report.php...

Fedora: Security Advisory for pdfbox (FEDORA-2021-8b17a2725e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 32 Update: pdfbox-2.0.23-1.fc32

Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...

Fedora: Security Advisory for pdfbox (FEDORA-2021-93469e0030)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: pdfbox-2.0.23-1.fc34

Apache PDFBox is an open source Java PDF library for working with PDF documents. This project allows creation of new PDF documents, manipulation of existing documents and the ability to extract content from documents. Apache PDFBox also includes several command line utilities. Apache PDFBox is...

Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities

Summary The Planning Analytics Workspace component of IBM Planning Analytics is affected by vulnerabilities . These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 62. Vulnerability Details CVEID: CVE-2020-4882 DESCRIPTION: IBM Planning Analytics...

CVE-2021-21287

Summary: CVE-2021-21287 affects MinIO Browser API. Before version RELEASE.2021-01-30T00-20-58Z, the server is vulnerable to a Server-Side Request Forgery (SSRF) in URL-related functionality (importing/publishing/reading from a URL). An attacker can trick the server into issuing requests to intern...

appcms V2.0 has an arbitrary file read vulnerability

appcms is a professional APP content management system that provides various extension modules, such as information, recommended positions, topics, friendly links, body internal links, etc., to help webmasters better personalize their websites. appcms V2.0 has an arbitrary file reading...

CVE-2020-28210

A CWE-79 Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker to inject HTML and JavaScript code into the user's browser...

CVE-2020-28210

CVE-2020-28210 is a Cross-Site Scripting (CWE-79) vulnerability in EcoStruxure Building Operation WebStation (V2.0–V3.1). The root cause is improper input neutralization during webpage generation, enabling an authenticated remote user to inject HTML/JavaScript into other WebReport users’ browsers...

CVE-2020-11830

QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com.oppo.qualityprotect V2.0...

Design/Logic Flaw

QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com.oppo.qualityprotect V2.0...

CVE-2020-11830

QualityProtect has a vulnerability to execute arbitrary system commands, affected product is com.oppo.qualityprotect V2.0...

CVE-2020-11830

CVE-2020-11830 affects QualityProtect (com.oppo.qualityprotect) V2.0. Public records describe a vulnerability allowing execution of arbitrary system commands; CVSS v3.1/3.0 metrics indicate CRITICAL impact (Network attack, no user interaction). Root cause and exact exploit details are not provide...

FusionAuth SAML v 2 0.2.3 Message Forging Vulnerability

Unauthenticated users can send forged messages to the FusionAuth to bypass authentication, impersonate other users or gain arbitrary roles. The SAML message can be send to the application without a signature even if this is required. The impact depends on individual applications that implement...