HTTP Request Header Injection

Overview io.micronaut:micronaut-http-client is a modern, JVM-based, full stack microservices framework designed for building modular, easily testable microservice applications. Affected versions of this package are vulnerable to HTTP Request Header Injection due to not validating request headers...

Command Execution Vulnerability in PbootCMS V1.3.2

PbootCMS is an open source enterprise building content management system CMS developed using the PHP language. PbootCMS V1.3.2 suffers from a command execution vulnerability that can be exploited by an attacker to execute code...

NEC Aterm WG2600HS OS Command Execution Vulnerability

The NEC Aterm WG2600HS is a wireless router from Nippon Electric NEC. An operating system command injection vulnerability exists in the NEC Aterm WG2600HS version 1.3.2, which arises from a network system or product not properly filtering special characters, commands, etc. from external input dat...

CVE-2020-5533

Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Liboping Input Validation Error Vulnerability

liboping is an open source Ping library and command line utility. An input validation error vulnerability exists in liboping version 1.3.2, which can be exploited by an attacker to read arbitrary files on the local system...

DEBIAN-CVE-2009-3614

liboping 1.3.2 allows users reading arbitrary files upon the local system...

Information disclosure

liboping 1.3.2 allows users reading arbitrary files upon the local system...

CVE-2009-3614

liboping 1.3.2 allows users reading arbitrary files upon the local system...

WordPress Easy!Appointments Plugin Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Easy!Appointments is a web-based appointment management plugin used in it. An information disclosure vulnerability exists in the...

CVE-2019-14936

Easy!Appointments 1.3.2 plugin for WordPress allows Sensitive Information Disclosure Username and Password Hash...

CVE-2017-18546

The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF...

Design/Logic Flaw

BD Alaris Gateway Workstation Versions, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.2 Build 15, 1.3.0 Build 14, 1.3.1 Build 13, This does not impact the latest firmware Versions 1.3.2 and 1.6.1, Additionally, the following products using software Version 2.3.6 and below, Alaris GS, Alaris GH, Alaris CC,...

Design/Logic Flaw

An issue was discovered in versions earlier than 1.3.2 for Polycom RealPresence Debut where the admin cookie is reset only after a Debut is rebooted...

CVE-2019-6534

The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file...

Arbitrary Code Execution

Overview safer-eval is a safer approach for eval in node and browser. Affected versions of this package are vulnerable to Arbitrary Code Execution. A payload using constructor properties can escape the sandbox and execute arbitrary code. Remediation Upgrade safer-eval to version 1.3.2 or higher...

CVE-2019-8422

A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in apps\admin\controller\content\ContentController.php...

CVE-2019-1000010

phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting XSS vulnerability in subnet-scan-telnet.php that can result in executing code in victims browser. This attack appears to be exploitable via victim visits link crafted by an attacker. This vulnerability appears to have been fixed in...

CVE-2019-1000010

phpIPAM version 1.3.2 and earlier contains a Cross Site Scripting XSS vulnerability in subnet-scan-telnet.php that can result in executing code in victims browser. This attack appears to be exploitable via victim visits link crafted by an attacker. This vulnerability appears to have been fixed in...

phpipam SQL injection vulnerability (CNVD-2019-43861)

phpIPAM is a set of open source PHP and MySQL based IP address management application IPAM. A SQL injection vulnerability exists in the /app/admin/nat/item-add-submit.php file in PHPipam version 1.3.2. An attacker can exploit this vulnerability to obtain information...

phpipam cross-site scripting vulnerability (CNVD-2019-43860)

phpIPAM is a set of open source PHP and MySQL based IP address management application IPAM. A cross-site scripting vulnerability exists in the phpipamredirect cookie in PHPipam 1.3.2 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary code in a user's brows...