99 matches found
CVE-2021-37172
A vulnerability has been identified in SIMATIC S7-1200 CPU family incl. SIPLUS variants V4.5.0. Affected devices fail to authenticate against configured passwords when provisioned using TIA Portal V13. This could allow an attacker using TIA Portal V13 or later versions to bypass authentication an...
IBOS 跨站脚本漏洞
IBOS is a collaborative office management system. A cross-site scripting vulnerability exists in ibos IBOS, which stems from a cross-site scripting XSS vulnerability in the content parameter of the body of an email in IBOS version 4.5.4...
IBOS 代码问题漏洞
IBOS is a collaborative office management system. A command injection vulnerability exists in ibos IBOS, which stems from a command injection vulnerability in database backup in IBOS 4.5.4 Open version. An attacker can exploit this vulnerability to gain server control privileges...
CVE-2020-21055
A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the 1 folder, 2 filename, and 3 newfilename variables in app\edit\filerename.php...
shadow 安全漏洞
shadow is a suite of tools used to maintain Debian systems. A security vulnerability exists in the Debian shadow package before 4.5-1, which allows a local user to log in as a user without a password, allowing all local users to escalate privileges...
parse-server encryption issue vulnerability
parse-server is an open source Backend-as-a-Service BaaS framework , it is mainly used for application back-end processing . A security vulnerability exists in Parse Server versions prior to 4.5.0 that stems from LDAP authentication involving user passwords stored in plaintext. No details of the...
Vulnerability fixed in QNAP QTS
QNAP has fixed a vulnerability in QTS. A malicious party could potentially exploit the vulnerability to inject arbitrary commands into applications. QNAP has released updates to fix the vulnerability in QTS 4.5.1.1495 build 20201123. For more information, see:...
CVE-2020-12593
Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data...
NexusDB Directory Traversal Vulnerability
NexusDB is a scalable and flexible SQL:2003 database engine. A directory traversal vulnerability exists in NexusDB versions prior to 4.50.23. An attacker can read files via . /directory traversal to read files...
Atlassian Fisheye and Crucible Cross-Site Scripting Vulnerabilities
Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A cross-site scripting vulnerability exists in the handling of response packet headers in...
SysGauge 4.5.18 - Local Denial of Service
!/usr/bin/python Exploit Title : SysGauge v4.5.18 - Local Denial of Service Exploit Author : Hashim Jawad Twitter : @ihack4falafel Author Website : ihack4falafel.com Vendor Homepage : http://www.sysgauge.com/ Vulnerable Software : http://www.sysgauge.com/setups/sysgaugesetupv4.5.18.exe Note :...
CVE-2017-14960
xDashboard in OpenText Document Sciences xPression formerly EMC Document Sciences xPression v4.5SP1 Patch 13 has SQL Injection...
SEMCMS_ASP_ v4.5 has CSRF and Arbitrary File Write Vulnerabilities
SemCMS is an open source foreign trade enterprise website management system, written in vbscript language, combined with iis running, SemCMS is very suitable for foreign trade enterprises, e-commerce Internet use. SEMCMSASP v4.5 exists CSRF and arbitrary file writing vulnerability. Attackers can...
IrfanView buffer overflow vulnerability (CNVD-2017-32312)
IrfanView is an image viewer developed by Irfan Skiljan, a software developer from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A buffer overflow vulnerability exists in IrfanView version 4.50 64-bit. A remote attacker can exploit this...
OpenText Document Sciences xPression Directory Traversal Vulnerability
OpenText Document Sciences xPression formerly known as EMC Document Sciences xPression is a document output management and customer communication solution from OpenText Canada. The solution integrates an organization's Customer Relationship Management CRM, Enterprise Content Management ECM, and...
CVE-2017-2975
Adobe Digital Editions versions 4.5.3 and earlier have an exploitable buffer over-read vulnerability. Successful exploitation could lead to information disclosure...
Linux kernel the __sys_recvmmsg function content misreference vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A content misreference vulnerability exists in the 'the sysrecvmmsg' function in the net/socket.c file in versions of Linux kernel prior to 4.5.2. A remote attacker could...
CVE-2016-4262
Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, a different vulnerability than CVE-2016-4256, CVE-2016-4257, CVE-2016-4258, CVE-2016-4259, CVE-2016-4260, and CVE-2016-4261...
