CVE-2024-21673

This High severity Remote Code Execution RCE vulnerability was introduced in versions 7.13.0 of Confluence Data Center and Server. Remote Code Execution RCE vulnerability, with a CVSS Score of 8.0 and a CVSS Vector of CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H allows an authenticated attacker t...

OpenKM Cross-Site Scripting Vulnerability

OpenKM is a document management system from OpenKM Spain. The system provides features such as version control, file history and file sharing. A cross-site scripting vulnerability exists in OpenKM version 7.1.40, which originates from a cross-site scripting attack that allows authenticated users ...

ZTE ZXCLOUD iRAI Code Injection Vulnerability

The ZTE ZXCLOUD iRAI is a virtualization appliance from China's ZTE Corporation ZTE. A security vulnerability exists in ZTE ZXCLOUD iRAI version 7.22.11P2 and prior versions, which stems from the program's inability to adequately validate user input. An attacker can exploit the vulnerability to...

IBM i Code Issues Vulnerabilities

IBM i is a suite of operating systems from International Business Machines IBM running on IBM Power Systems and IBM PureSystems. A code issue vulnerability exists in IBM i versions 7.2, 7.3, 7.4, and 7.5 that stems from an elevation of privilege vulnerability in the Facsimile Support feature. An...

TOTOLINK A7100RU 安全漏洞

The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A7100RU version V7.4cu.2313B20191024, which originates from the parameter flag in file /cgi-bin/cstecgi.cgi?action=login that fails to correctly validate the length...

Kakadu Software SDK Code Issue Vulnerability

Kakadu Software SDK is a JPEG2000 software development kit SDK from Kakadu Software, an Australian company. A code issue vulnerability exists in Kakadu Software SDK version 7.9, which stems from a path traversal vulnerability. An attacker could use this vulnerability to access local and remote...

CVE-2023-6314

Stack-based buffer overflow in FPWin Pro version 7.7.0.0 and all previous versions may allow attackers to execute arbitrary code via a specially crafted project file...

PT-2023-7921 · Ibm · Ibm Qradar Siem

Name of the Vulnerable Software and Affected Versions: IBM Qradar SIEM version 7.5 Description: The issue is related to the misidentification of data, which could allow a privileged user to obtain sensitive domain information. This is due to insufficient protection of service data. A remote...

IBM i Security Vulnerabilities

IBM i is a suite of operating systems from the U.S. company International Business Machines IBM that runs in IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i that stems from the presence of an information disclosure vulnerability. Affected products and versions: IBM...

CVE-2023-47261

Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnectionAsync //gettingstarted request contains a connection string for privileged SQL Server database access, and xpcmdshell can be enabled...

HPESBNW04574 rev.1 - HPE Intelligent Management Center, Multiple Vulnerabilities

Potential Security Impact: Remote: Code Execution, Denial of Service DoS, Unauthorized Data Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC - Prior to 7.3 E0710H02 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

OTCMS SQL Injection Vulnerability

OTCMS Nettie CMS is an article-based web content management system CMS. A SQL injection vulnerability exists in OTCMS version 7.01, which originates from the parameter sqlContent in the file /admin/indbackstage.php that can lead to SQL injection...

CVE-2023-49007

In Netgear Orbi RBR750 firmware before V7.2.6.21, there is a stack-based buffer overflow in /usr/sbin/httpd...

PT-2023-32681 · Phpems · Phpems

Name of the Vulnerable Software and Affected Versions: PHPEMS version 7.0 Description: A problematic issue has been found in the Content Section Handler component, specifically affecting the file appcontentclsapi.cls.php. This issue leads to cross-site scripting and can be initiated remotely. The...

PHPEMS Cross-Site Scripting Vulnerability

PHPEMS is a PHP online practice exam system. A cross-site scripting vulnerability exists in PHPEMS version 7.0, which stems from a cross-site scripting XSS vulnerability in the component Content Section Handler...

UBUNTU-CVE-2023-48948

An issue in the boxdiv function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS after running a SELECT statement...

VulnCheck KEV: CVE-2021-21389

BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in...

Virtuoso Open-Source Edition Security Vulnerabilities

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment and HTTP application server platform from OpenLink Software open source. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which...

VulnCheck KEV: CVE-2018-11222

Local File Inclusion LFI in Artica Pandora FMS through version 7.23 allows an attacker to call any php file via the /pandoraconsole/ajax.php ajax endpoint...

Artica Pandora FMS Security Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS versions 700 through 772, which can be exploited to read arbitrary...