pczupil X2CRM 跨站脚本漏洞

pczupil X2CRM is a pczupil open source application. A next generation open source social selling application for small and medium sized businesses. A cross-site scripting vulnerability exists in pczupil X2CRM version 7.1, which can be exploited to inject arbitrary web script or HTML via the...

PT-2021-14904 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 7.1 and later Description: An issue has been discovered in GitLab where a member of a private group was able to validate the use of a specific name for a private project. Recommendations: For GitLab versions 7.1 and later, at...

PT-2020-15606

Name of the Vulnerable Software and Affected Versions Ilex International Sign&go Workstation Security Suite version 7.1 Description The issue allows elevation of privileges via a symlink attack on the file ProgramDataIlexS&GLogs000-sngWSService1.log. This can lead to arbitrary file creation and...

CVE-2020-4238

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 175411...

CVE-2020-5393

In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS...

CVE-2018-3111

Vulnerability in the Oracle Retail Xstore Office component of Oracle Retail Applications subcomponent: Internal Operations. The supported version that is affected is 7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Xsto...

CVE-2019-4267

The IBM Spectrum Protect 7.1 and 8.1 Backup-Archive Client is vulnerable to a buffer overflow. This could allow execution of arbitrary code on the local system or the application to crash. IBM X-Force ID: 160200...

PT-2019-16984 · Hewlett Packard +2 · Hp-Ux +2

Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect version 7.1 Description: The issue affects the backup or archive operation of HP-UX VxFS objects. If an object has more than twelve Access Control List ACL entries, the IBM Spectrum Protect client silently skips these...

Liferay Portal Cross-Site Scripting Vulnerability (CNVD-2019-16545)

Liferay Portal is a J2EE-based portal solution from Liferay, Inc. The solution uses EJB as well as JMS and other technologies , and can be used as a Web publishing and sharing workspaces , enterprise collaboration platforms , social networks and so on. A cross-site scripting vulnerability exists ...

CVE-2017-12697

A Man-in-the-Middle issue was discovered in General Motors GM and Shanghai OnStar SOS SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive information when the client connects to the server...

IBM OpenPages GRC Platform Cross-Site Scripting Vulnerability (CNVD-2017-34427)

IBM OpenPages GRC Platform is a suite of platforms for managing enterprise risk and compliance from IBM in the United States. The platform provides a set of core services and functional components that cover the risk and compliance domain including operational risk, policy and compliance, financi...

CVE-2017-1300

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 125162...

CVE-2017-0688

A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35584425...

CVE-2017-1175

IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 123297...

ZZCMS 7.1 Multiple Arbitrary File Deletion Vulnerabilities

Z Station Chief Merchants Content Management System ZZCMS developed by the ZZCMS team, incorporating database optimization, content caching, AJAX and other technologies,, open source, independent functional modules, to facilitate secondary development. ZZCMS 7.1 version of the existence of multip...

IBM Tivoli Storage Manager for Virtual Environments Security Bypass Vulnerability

IBM Tivoli Storage Manager for Virtual Environments TSMVE is a VM backup and recovery solution from IBM USA. The solution protects VMware vSphere virtual machines by offloading backup workloads to a central server. A security bypass vulnerability exists in IBM TSMVE versions 7.1.0.0 through 7.1.4...

SQL injection vulnerability in ZZCMS system searchform.php file

ZZCMS is an enterprise website builder. ZZCMS System v7.1 suffers from a SQL injection vulnerability. The searchform.php file in the /company/ directory fails to correctly process $COOKIE'companyb' data, allowing remote attackers to exploit the vulnerability by submitting a specially crafted SQL...

CVE-2016-0289

shiprec.xml in the SHIPREC application in IBM Maximo Asset Management 7.1 and 7.5 before 7.5.0.10 and 7.6 before 7.6.0.4 allows remote authenticated users to bypass intended item-selection restrictions via unspecified vectors...