PT-2023-6733 · Best Practical +2 · Request Tracker +2

Name of the Vulnerable Software and Affected Versions: Best Practical Request Tracker RT versions 4.4.6 and earlier Best Practical Request Tracker RT versions 5.0.4 and earlier Description: The issue allows Information Disclosure via fake or spoofed RT email headers in an email message or a...

Vinchin Backup and Recovery Security Vulnerabilities

Vinchin Backup and Recovery is an easy-to-use, safe and reliable virtual machine data protection software from China Yunqi Technology Vinchin. It is used for backup and recovery. A security vulnerability exists in Vinchin Backup and Recovery that stems from the presence of hard-coded credentials...

PT-2023-32326 · Unknown · Shaanxi Chanming Education Technology Score Query System

Name of the Vulnerable Software and Affected Versions: Shaanxi Chanming Education Technology Score Query System version 5.0 Description: A critical issue affects the system's unknown processing, allowing for SQL injection through the manipulation of the stuIdCard argument. The attack can be...

PT-2023-27992 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: An issue in the component /common/DownController.java of JFinalCMS allows attackers to execute a directory traversal. Recommendations: For JFinalCMS version 5.0.0, consider restricting access to the...

CVE-2023-30995

IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268...

MongoDB Server 信任管理问题漏洞

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . A security vulnerability exists in MongoDB Server version v6.3, MongoDB Serve...

CVE-2023-38766

Cross Site Scripting XSS vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted payload to the PersonView.php component...

ChurchCRM Cross-Site Scripting Vulnerability

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version v.5.0.0 that stems from the presence of a cross-site scripting XSS vulnerability...

ChurchCRM SQL Injection Vulnerability

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version v.5.0.0 that stems from the presence of a SQL injection vulnerability...

CVE-2023-36132

PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control...

Availability Booking Calendar PHP Cross Site Scripting Vulnerability

Availability Booking Calendar PHP is a GZ Scripts open source availability booking calendar system. A cross-site scripting vulnerability exists in Availability Booking Calendar PHP version 5.0, which stems from the parameter sessionid in the file /index.php that causes cross-site scripting...

Availability Booking Calendar PHP Security Vulnerability

Availability Booking Calendar PHP is an open source availability booking calendar system by GZ Scripts. A security vulnerability exists in Availability Booking Calendar PHP version 5.0, which is vulnerable to user account takeover...

Availability Booking Calendar PHP Security Vulnerability

Availability Booking Calendar PHP is an open source availability booking calendar system by GZ Scripts. A security vulnerability exists in Availability Booking Calendar PHP version 5.0 that stems from vulnerability to incorrect access control...

CVE-2022-48332

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys filenamelen integer overflow and resultant buffer overflow...

CVE-2022-48333

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys prefixlen+featurenamelen integer overflow and resultant buffer overflow...

PT-2023-22497 · S Cms · S-Cms

Name of the Vulnerable Software and Affected Versions: S-CMS version 5.0 Description: The issue is related to an authenticated remote code execution RCE vulnerability. It can be exploited via the /admin/ajax.php API endpoint. Recommendations: For S-CMS version 5.0, consider disabling access to th...

CVE-2023-1282

The Drag and Drop Multiple File Upload PRO - Contact Form 7 Standard WordPress plugin before 2.11.1 and Drag and Drop Multiple File Upload PRO - Contact Form 7 with Remote Storage Integrations WordPress plugin before 5.0.6.4 do not sanitise and escape a parameter before outputting it back in the...

Gigamon GigaVUE-OS 跨站脚本漏洞

Gigamon GigaVUE-OS is an operating system for GigaVUE network devices from Gigamon Corporation, USA. A security vulnerability exists in Gigamon GigaVUE-OS version 5.0 202, which stems from a discovery containing a Reflective Cross-Site Scripting XSS vulnerability. An attacker could exploit the...

SUSE CVE-2018-19141

Open Ticket Request System OTRS 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled...

PT-2022-27642 · Hillstone · Hillstone Firewall Sg-6000

Name of the Vulnerable Software and Affected Versions: Hillstone Firewall SG-6000 versions 5.0.4.0 and earlier Description: The issue is related to incorrect access control, allowing an attacker to bypass permissions and gain super administrator privileges in the background of the firewall. This ...