PT-2024-16701 · Nec · Univerge Ix +1

Name of the Vulnerable Software and Affected Versions: NEC Corporation UNIVERGE IX versions Ver9.2 through Ver10.10.21 NEC Corporation UNIVERGE IX versions Ver10.8 through Ver10.8.27 NEC Corporation UNIVERGE IX versions Ver10.9 through Ver10.9.14 NEC Corporation UNIVERGE IX-R/IX-V version Ver1.2....

Vulnerability fixed in Oracle Agile PLM Framework

Oracle has fixed a vulnerability in version 9.3.6 of the Agile PLM Framework. The vulnerability allows unauthenticated attackers with network access to gain access to sensitive data. Oracle has released an out-of-band update to fix the vulnerability. See attached references for more information...

Weaver e-cology 安全漏洞

Weaver e-cology is a collaborative management application platform from China's Weaver. A security vulnerability exists in Weaver e-cology v9, which is prone to SQL injection attacks...

Weaver e-cology 安全漏洞

Weaver e-cology is a collaborative management application platform from China's Weaver. A security vulnerability exists in Weaver e-cology version v9, which stems from vulnerability to remote code execution attacks, where an attacker can execute arbitrary code by injecting a carefully crafted...

Weaver e-cology 安全漏洞

Weaver e-cology is a collaborative management application platform from China's Weaver. A security vulnerability exists in Weaver e-cology v9, which is prone to SQL injection attacks...

Weaver e-cology 安全漏洞

Weaver e-cology is a collaborative management application platform from China-based Weaver. A security vulnerability exists in Weaver e-cology v9 that could allow an authenticated attacker to perform directory traversal and arbitrarily delete files...

SAS Studio 安全漏洞

SAS Studio is a Web browser-based programming environment from SAS. A security vulnerability exists in SAS Studio version 9.4. A remote attacker can exploit the vulnerability to execute arbitrary SQL commands via a POST body request...

ACI Worldwide Proactive Risk Manager 安全漏洞

ACI Worldwide Proactive Risk Manager is an electronic payment risk management program from ACI Worldwide, USA. A security vulnerability exists in ACI Worldwide Proactive Risk Manager version 9.1.1.0, which originates from multiple cross-site scripting vulnerabilities in the add/edit form field...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. A security vulnerability in Mattermost version 9.10.2 and prior 9.10.x, version 9.11.1 and prior 9.11.x, and version 9.5.9 and prior 9.5.x stems from an inability to prevent the display of detailed err...

PT-2024-16190

Name of the Vulnerable Software and Affected Versions Okta Verify for iOS versions 9.25.1 beta through 9.27.0 including beta Description A vulnerability in Okta Verify for iOS allows push notification responses through the iOS ContextExtension feature, enabling authentication to proceed regardles...

Mitel MiCollab 访问控制错误漏洞

Mitel MiCollab is a mobile application that provides voice, video, messaging, audio conferencing, and team collaboration for employees from Mitel Canada. A security vulnerability exists in Mitel MiCollab version 9.8 SP1 FP2 9.8.1.201 and prior versions, which stems from a missing authentication...

UTCMS 代码问题漏洞

UTCMS is a content management system built on the UT framework by the individual developer of usaltool. A code issue vulnerability exists in UTCMS V9 that stems from mishandling of parameters, leading to deserialization...

WordPress plugin WP Travel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

PT-2024-30906 · WordPress · Wp Travel

Name of the Vulnerable Software and Affected Versions: WP Travel versions through 9.3.1 Description: The issue involves Improper Neutralization of Input During Web Page Generation, which is also known as Cross-site Scripting XSS. This problem allows for Stored XSS in WP Travel. Recommendations: F...

Exploit for SQL Injection in Os4Ed Opensis

UnAuthenticated SQL Injection Vulnerability in openSIS-Classic...

Faronics Deep Freeze 缓冲区错误漏洞

Faronics Deep Freeze is a system recovery software developed by Faronics, Inc. A buffer error vulnerability exists in Faronics Deep Freeze version 9.00.020.5760, which stems from susceptibility to an out-of-bounds read vulnerability that can trigger the 0x70014 IOCTL code in the FarDisk.sys drive...

Malicious code in neuron-viewer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39e11d5c0e9f49ca7c1e136d6f73f692162e1873d0def4a3135bd3dacbdd9ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Scriptcase 路径遍历漏洞

Scriptcase is a low-code platform for rapid application development from Scriptcase, Inc. A path traversal vulnerability exists in Scriptcase version 9.4.019 that stems from improper parameter handling and allows an unauthenticated remote user to bypass SecurityManager's expected restrictions and...

PTC ThingWorx 安全漏洞

PTC ThingWorx is a complete end-to-end technology platform designed for the Industrial Internet of Things IIoT from PTC Corporation, USA. A security vulnerability exists in PTC ThingWorx version v9.5.0 that stems from an insecure direct object reference that allows an attacker to view sensitive...

CVE-2024-6499

The WordPress Button Plugin MaxButtons plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 9.7.8. This makes it possible for unauthenticated attackers to obtain the full path to instances, which they may be able to use in combination with other...