2943 matches found
CVE-2023-41507
Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters...
CVE-2023-41508
A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel...
CVE-2023-36088
Server Side Request Forgery SSRF vulnerability in NebulaGraph Studio version 3.7.0, allows remote attackers to gain sensitive information...
CVE-2023-37826
A cross-site scripting XSS vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fieldname parameter...
DEBIAN-CVE-2023-40567
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an Out-Of-Bounds Write in the cleardecompressbandsdata function in which there is no offset validation. Abuse of this vulnerability may lead to an out of bounds...
CVE-2023-31925
Brocade SANnav before v2.3.0 and v2.2.2a stores SNMPv3 Authentication passwords in plaintext. A privileged user could retrieve these credentials with knowledge and access to these log files. SNMP credentials could be seen in SANnav SupportSave if the capture is performed after an SNMP configurati...
Brocade SANnav 安全漏洞
Broadcom Brocade SANnav is a suite of SAN management platforms from Broadcom USA. A security vulnerability exists in Brocade SANnav versions prior to v2.3.0 and v2.2.2a, which stems from the fact that Brocade SANnav stores SNMPv3 authentication passwords in cleartext, and a privileged user can...
CVE-2023-34172
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Miled WordPress Social Login plugin = 3.0.4 versions...
Archive 安全漏洞
Archive is a Dart library for encoding and decoding various archive and compression formats such as Zip, Tar, GZip, ZLib and BZip2. A security vulnerability exists in Archive version v3.3.7, which originates from a vulnerability that allows an attacker to spoof zip filenames, resulting in...
PT-2023-26801 · Archive · Archive
Name of the Vulnerable Software and Affected Versions: Archive version 3.3.7 Description: The issue allows attackers to execute a path traversal via extracting a crafted zip file. Recommendations: For Archive version 3.3.7, update to a version that fixes this issue to prevent path traversal attac...
Business Directory Script SQL注入漏洞
Business Directory Script is an easy to use PHP directory script for anyone who wants to create a business directory. A security vulnerability exists in phpjabbers Business Directory Script version 3.2, which stems from the vulnerability to SQL injection via the column parameter...
SpringBlade SQL注入漏洞
Breed Network Technology SpringBlade is a set of microservice development platform from China Breed Network Technology. A security vulnerability exists in SpringBlade version V3.6.0, which stems from a SQL injection when executing a SQL query, where the parameters submitted by the user are not...
CVE-2023-40749
PHPJabbers Food Delivery Script v3.0 is vulnerable to SQL Injection in the "column" parameter of index.php...
Food Delivery Script SQL注入漏洞
Food Delivery Script is an online food ordering system. A security vulnerability exists in PHPJabbers Food Delivery Script version v3.0, which is caused by a SQL injection vulnerability in the "column" parameter of the index.php file...
Ticket Support Script 跨站脚本漏洞
Ticket Support Script is an affordable online help desk system. A security vulnerability exists in PHPJabbers Ticket Support Script version v3.2, which is caused by a cross-site scripting vulnerability in the "message" parameter of the index.php file...
PT-2023-27631 · Phpjabbers · Phpjabbers Ticket Support Script
Name of the Vulnerable Software and Affected Versions: PHPJabbers Ticket Support Script version 3.2 Description: The issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid...
Ticket Support Script 安全漏洞
Ticket Support Script is an affordable online help desk system. A security vulnerability exists in Ticket Support Script version v3.2, which originates from a user enumeration vulnerability during password reset...
Restaurant Booking Script 安全漏洞
Restaurant Booking Script is a restaurant reservation system. A security vulnerability exists in PHPJabbers Restaurant Booking Script version v3.0, which stems from a user enumeration vulnerability during password reset...