1036 matches found
PT-2024-17638 · Unknown · Tongda Oa 2017
Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.9 Description: A critical vulnerability was found in Tongda OA 2017. The issue affects an unknown functionality of the file /general/attendance/manage/ask duty/delete.php. The manipulation of the ASK DUTY ID...
CVE-2024-0430
IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver...
PT-2024-19337 · Ibm · Ibm App Connect Enterprise
Name of the Vulnerable Software and Affected Versions: IBM App Connect Enterprise versions 11.0.0.1 through 11.0.0.24 IBM App Connect Enterprise versions 12.0.1.0 through 12.0.11.0 Description: The issue is due to improper restriction of excessive authentication attempts, which could allow a remo...
CVE-2024-20920
Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...
PT-2024-1250 · Oracle · Oracle Solaris
Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to insufficient input validation in the kernel of Oracle Solaris, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle Solaris. Successful...
PT-2024-1189 · Oracle · Oracle Solaris
Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to insufficient input validation in the Filesystem component of Oracle Solaris. This easily exploitable vulnerability allows a low-privileged attacker with logon access to the...
PT-2024-13424 · Wwbn · Avideo
Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 and dev master commit 15fed957fb Description: An information disclosure issue exists in the aVideoEncoder.json.php chunkFile path functionality. A specially crafted HTTP request can lead to arbitrary file read...
PT-2024-13632 · Wwbn · Wwbn Avideo
Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions 11.6 Description: A cross-site scripting xss vulnerability exists in the function getOpenGraph videoName functionality. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a us...
PT-2024-13523 · Wwbn · Avideo
Name of the Vulnerable Software and Affected Versions: WWBN AVideo version 11.6 WWBN AVideo dev master commit 15fed957fb Description: A cross-site scripting xss issue exists in the channelBody.php user name functionality. This allows arbitrary Javascript execution through a specially crafted HTTP...
CVE-2024-20809
Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data...
CVE-2024-20808
Improper access control vulnerability in Nearby device scanning prior version 11.1.14.7 allows local attacker to access data...
WordPress Plugin WP TripAdvisor Review Slider Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability in the...
CVE-2023-45887
DS Wireless Communication DWC with DWCVERSION3 and DWCVERSION11 allows remote attackers to execute arbitrary code on a game-playing client's machine via a modified GPCM message...
PT-2023-32838 · Tongda Oa · Tongda Oa
Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.9 Description: A critical issue has been found in the software, affecting an unknown function of the file general/vehicle/checkup/delete search.php. The manipulation of the VU ID argument leads to sql injectio...
dwc_network_server_emulator Security Vulnerability
dwcnetworkserveremulator is a Nintendo DS and Wii online multiplayer server emulator by barronwaffles individual developer. A security vulnerability exists in dwcnetworkserveremulator, which stems from DS Wireless Communication DWC with DWCVERSION3 and DWCVERSION11, that allows a remote attacker ...
Newsletter Input Validation Error Vulnerability
Newsletter is a one-click bulk email solution. An input validation error vulnerability exists in Newsletter Software SuperMailer version 11.20.0.2204, which originates from a vulnerability that could allow an attacker to crash the application by sending a malicious configuration file to the user...
CVE-2023-6611
A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file pda/pad/email/delete.php. The manipulation of the argument EMAILID leads to sql injection. The exploit has been disclosed to the public and may be used...
TONGDA Office Anywhere SQL Injection Vulnerability
TONGDA Office Anywhere is a collaborative office OA system. Tongda OA 2017 11.9 and earlier versions have a SQL injection vulnerability that originates from a SQL injection vulnerability in the file pda/pad/email/delete.php...
PT-2023-8444 · Ibm · Ibm Db2
Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server version 11.5 Description: The issue is related to insufficient input validation when processing columnar tables, which could allow a remote attacker to cause a denial of service...