CVE-2022-21660: Missing Authorization

Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users. Authentication is missing on the setUserInfo function. Users are advised to update as soon as possible. There are no known workarounds...

Philips Vue PACS 路径遍历漏洞

Philips Vue PACS is an image management solution from Philips, a Dutch company. A security vulnerability exists in Philips Vue PACS that stems from a VideoStream feature that allows authenticated users to access files stored outside of the web root directory...

Exploit for Missing Authorization in Gin-Vue-Admin_Project Gin-Vue-Admin

Gin-Vue-admin Vertical Override Vulnerability and Code Analy...

Simple Online Mens Simple Online Mens Salon Management System SQL Injection Vulnerability

Simple Online Mens Salon Management System is a simple login and registration system based on Vue-Cli and Thinkphp.Simple Online Mens Salon Management System is vulnerable to SQL injection, which can be exploited by attackers to retrieve all authentication and information about the users of this...

CVE-2021-44219

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

CVE-2021-44219

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

CVE-2021-44219

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

Sql injection

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

CVE-2021-44219

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

CVE-2021-44219

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

CVE-2021-44219

Gin-Vue-Admin before 2.4.6 is affected by an SQL injection flaw stemming from mishandling the SQL database. The vulnerability affects the GetAPIInfoList path via the order parameter, enabling attackers to inject and execute arbitrary SQL statements. This is identified across multiple feeds (e.g.,...

PT-2021-24066

Name of the Vulnerable Software and Affected Versions: Gin-Vue-Admin versions prior to 2.4.6 Description: The issue is related to the mishandling of a SQL database. Recommendations: For versions prior to 2.4.6, update to version 2.4.6 or later to resolve the issue...

Gin-Vue-Admin 安全漏洞

Gin-Vue-Admin is a full-stack pre-development infrastructure platform based on Vue and Gin development. A security vulnerability exists in Gin-Vue-Admin versions prior to 2.4.6 that stems from a processing SQL database error...

CVE-2021-44219: Undefined Security Weakness

Gin-Vue-Admin before 2.4.6 mishandles a SQL database...

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1275-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

OPENSUSE-SU-2021:1255-1 Security update for nextcloud

This update for nextcloud fixes the following issues: Update to 20.0.12 Fix boo1190291 - CVE-2021-32766 CWE-209: Generation of Error Message Containing Sensitive Information - CVE-2021-32800 CWE-306: Missing Authentication for Critical Function - CVE-2021-32801 CWE-532: Insertion of Sensitive...

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1252-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1253-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1255-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...

Security update for nextcloud (important)

openSUSE Security Update: Security update for nextcloud Announcement ID: openSUSE-SU-2021:1250-1 Rating: important References: 1190291 Cross-References: CVE-2021-32766 CVE-2021-32800 CVE-2021-32801 CVE-2021-32802 CVSS scores: CVE-2021-32800 NVD : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N...