IBM Security Guardium Security Vulnerabilities

IBM Security Guardium is a suite of platforms from International Business Machines IBM that provide data protection capabilities. The platform includes features such as customized UI, report management and streamlined audit process building. A security vulnerability exists in IBM Security Guardiu...

CVE-2023-48781

Cross-Site Request Forgery CSRF vulnerability in Marketing Rapel MkRapel Regiones y Ciudades de Chile para WC.This issue affects MkRapel Regiones y Ciudades de Chile para WC: from n/a through 4.3.0...

OESA-2023-1906 netty security update

Asynchronous event-driven network application Java framework. Security Fixes: Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion...

TAIWAN-CA(TWCA) JCICSecurityTool Input Validation Error Vulnerability

TAIWAN-CATWCA JCICSecurityTool is an application from Taiwan Web Certification TWCA. An input validation error vulnerability exists in TAIWAN-CATWCA JCICSecurityTool version v4.2.3.32, which stems from insufficient filtering of special characters in registry-related functions, and can be exploite...

CVE-2023-40921

SQL Injection vulnerability in functions/pointlist.php in Common Services soliberte before v4.3.03 allows attackers to obtain sensitive information via the lat and lng parameters...

PT-2023-31588 · Pluck Cms · Pluck Cms

Name of the Vulnerable Software and Affected Versions: Pluck-CMS version 4.7.18 Description: The issue is related to an arbitrary file upload vulnerability in the /inc/modules install.php component. This vulnerability allows attackers to execute arbitrary code by uploading a crafted ZIP file...

PT-2023-31587 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: Semcms version 4.8 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the AID parameter at the SEMCMS Function.php file. Recommendations: For Semcms version 4.8, consider restricting access to the SEMC...

PT-2023-7891 · Sap · Sap Btp Security Services Integration Library +1

Name of the Vulnerable Software and Affected Versions: SAP BTP Security Services Integration Library Python sap-xssec versions = 4.1.0 It is recommended to upgrade to the latest released version to ensure the issue is fully resolved. No workarounds are available for this issue...

MonicaHQ Security Breach

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version 4.0.0. An attacker can exploit this vulnerability to upload SVG documents that contain cross-site scripting vulnerabilities...

XunRuiCMS Security Vulnerability

XunRuiCloud Software Development XunRuiCMS XunRuiCMS is an open source content management system CMS from China's XunRuiCloud Software Development Company. A security vulnerability exists in XunRuiCMS version v4.5.5, which was discovered to contain a Reflected Cross-Site Scripting XSS vulnerabili...

QNAP Systems QVR Operating System Command Injection Vulnerability

The QNAP Systems QVR is a QNAP monitoring system control center from China Weilian Technology QNAP Systems. An operating system command injection vulnerability exists in the QNAP Systems QVR version 4.x. An attacker could exploit this vulnerability to execute commands over the network...

osCommerce Security Breach

osCommerce is an open source online shopping e-commerce solution based on the GNUGPL license. A security vulnerability exists in osCommerce version 4, which originates from a cross-site scripting XSS vulnerability in the file /b2b-supermarket/catalog/all-products...

PT-2023-32713 · Unknown · Oscommerce

Name of the Vulnerable Software and Affected Versions: osCommerce version 4 Description: A problematic issue has been found in osCommerce, affecting an unknown part of the file /b2b-supermarket/catalog/all-products. The manipulation of the keywords argument with a specific input leads to cross-si...

Time Slots Booking Calendar Security Breach

PHPJabbers Time Slots Booking Calendar is a booking system from PHPJabbers Serbia. A security vulnerability exists in Time Slots Booking Calendar version 4.0, which stems from a CSV injection vulnerability in the ID field...

CVE-2023-42574

Improper access control vulnerablility in GameHomeCN prior to version 4.2.60.2 allows local attackers to launch arbitrary activity in GameHomeCN...

CVE-2023-40459

The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization during authentication, which could potentially result in a Denial of Service DoS condition for ACEManager without impairing other router functions. ACEManager recovers from the DoS condition by...

Sierra Wireless ALEOS Cross-Site Scripting Vulnerability

Sierra Wireless ALEOS AAF is a framework for creating applications in Sierra Wireless AirLink gateways from Sierra Wireless Canada. Sierra Wireless ALEOS ALEOS 4.16 and prior versions have a cross-site scripting vulnerability that stems from the presence of a stored cross-site scripting XSS...

Sierra Wireless ALEOS Cross-Site Scripting Vulnerability

Sierra Wireless ALEOS AAF is a framework for creating applications in Sierra Wireless AirLink gateways from Sierra Wireless Canada. A security vulnerability exists in Sierra Wireless ALEOS 4.16 and earlier versions that stems from the ACEManager component not validating the name and type of...

PT-2023-32393 · WordPress · Word Balloon

Name of the Vulnerable Software and Affected Versions: Word Balloon WordPress plugin versions prior to 4.20.3 Description: The issue allows an unauthenticated attacker to trick a logged-in user into deleting arbitrary avatars by clicking a link, due to a lack of protection against CSRF attacks in...

PT-2023-20433 · Ibm · Ibm Planning Analytics On Cloud Pak For Data

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics on Cloud Pak for Data version 4.0 Description: The issue is caused by insecure network communication, which could allow an attacker on a shared network to obtain sensitive information. Recommendations: For IBM Planning...