87 matches found
ACI Worldwide Proactive Risk Manager 安全漏洞
ACI Worldwide Proactive Risk Manager is an electronic payment risk management program from ACI Worldwide, USA. A security vulnerability exists in ACI Worldwide Proactive Risk Manager version 9.1.1.0, which originates from multiple cross-site scripting vulnerabilities in the add/edit form field...
Exploit for SQL Injection in Os4Ed Opensis
UnAuthenticated SQL Injection Vulnerability in openSIS-Classic...
TOTOLINK X5000R 操作系统命令注入漏洞
The TOTOLINK X5000r is a wireless router manufactured by TOTOLINK. TOTOLINK X5000r has a command injection vulnerability in version 9.1.0cu.2350b20230313. The vulnerability arises because the setAccessDeviceCfg function within the /cgi-bin/cstecgi.cgi file fails to properly validate or clean up...
PT-2024-6035
Name of the Vulnerable Software and Affected Versions FRRouting versions through 9.1 Description The issue is related to the get edge function in the ospf te.c file of the OSPF daemon component in FRRouting, which can return a NULL pointer. If calling functions do not handle this NULL value, the...
CVE-2022-4712
The WP Cerber Security plugin for WordPress is vulnerable to stored cross-site scripting via the log parameter when logging in to the site in versions up to, and including, 9.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute wheneve...
TOTOLINK NR1800X Buffer Error Vulnerability
TOTOLINK NR1800X is an outstanding 5G NR indoor Wi-Fi and SIP CPE from China's Gion Electronics TOTOLINK.Designed to provide fast and easy deployment of NR Fixed Data Services for homes and offices. A security vulnerability exists in TOTOLINK NR1800X version V9.1.0u.6279B20210910 and prior...
PortlandLabs Concrete CMS 跨站脚本漏洞
PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. in the United States. A cross-site scripting vulnerability exists in PortlandLabs Concrete CMS versions prior to 9.1. An attacker can exploit this vulnerability to perform cross-site scripti...
CVE-2023-28471
Concrete CMS previously concrete5 in versions 9.0 through 9.1.3 is vulnerable to Stored XSS via a container name...
Microsoft Dynamics 跨站脚本漏洞
Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. The following products and...
Microsoft Dynamics 跨站脚本漏洞
Microsoft Dynamics is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A security vulnerability exists in Microsoft Dynamics. The following products and...
Apple watchOS 安全漏洞
Apple watchOS is an operating system for smartwatches from Apple. A security vulnerability exists in Apple watchOS version 9.1, which stems from an application that may be able to execute arbitrary code with kernel privileges...
Veritas Desktop and Laptop Option 跨站脚本漏洞
Veritas Desktop and Laptop Option is a software from Veritas, USA that provides data backup and endpoint protection features for Windows and Mac desktops and laptops. The software supports network-less protection, instant backup, customized failover, self-service restore, and other protection...
TOTOLINK A3700R 缓冲区错误漏洞
The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A3700R version V9.1.2u.6134B20201202, which stems from a stack overflow in the command parameter of the setTracerouteCfg method...
TOTOLINK A7000R 缓冲区错误漏洞
The TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A7000R version V9.1.0u.6115B20201022, which originates from a command injection issue with the addEffect parameter in the setting/setTracerouteCfg location...
CVE-2022-36956
In Veritas NetBackup, the NetBackup Client allows arbitrary command execution from any remote host that has access to a valid host-id NetBackup certificate/private key from the same domain. The affects 9.0.x through 9.0.0.1 and 9.1.x through 9.1.0.1...
Vulnerability fixed in IBM MQ
A vulnerability has been fixed in IBM MQ for the Solaris platform. A malicious party could potentially exploit the vulnerability to cause a denial-of-service via the Queue Manager channel process. IBM has released updates to fix the vulnerability in MQ 9.1. For more information, see:...
CVE-2021-39034
IBM MQ 9.1 LTS is vulnerable to a denial of service attack caused by an issue within the channel process. IBM X-Force ID: 213964...
CVE-2021-3048
Certain invalid URL entries contained in an External Dynamic List EDL cause the Device Server daemon devsrvr to stop responding. This condition causes subsequent commits on the firewall to fail and prevents administrators from performing commits and configuration changes even though the firewall...
CVE-2021-2311
Vulnerability in the Oracle Hospitality Inventory Management product of Oracle Food and Beverage Applications component: Export to Reporting and Analytics. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...