1543 matches found
CVE-2024-0314 XSS vulnerability in FireEye Central Management
XSS vulnerability in FireEye Central Management affecting version 9.1.1.956704, which could allow an attacker to modify special HTML elements in the application and cause a reflected XSS, leading to a session hijacking...
UBUNTU-CVE-2023-50290
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designe...
NetApp ONTAP Security Vulnerability
NetApp ONTAP is a proprietary operating system from Network Appliance NetApp, Inc. It is used for storage disk arrays. A security vulnerability exists in NetApp ONTAP 9.4 and later versions that stems from the presence of a sensitive information disclosure vulnerability...
CVE-2023-47140
IBM CICS Transaction Gateway 9.3 could allow a user to transfer or view files due to improper access controls...
Chinese Perpetual Calendar Security Vulnerability
Chinese Perpetual Calendar 微鲤万年历 is a mobile calendar application. A security vulnerability exists in Chinese Perpetual Calendar version v9.0.0, which originates from an arbitrary file read vulnerability in the openFile method...
PT-2023-30874 · Unknown · Concrete Cms
Name of the Vulnerable Software and Affected Versions: Concrete CMS versions prior to 8.5.14 Concrete CMS versions 9 prior to 9.2.3 Description: The issue allows Cross Site Request Forgery CSRF via the "ccm/calendar/dialogs/event/delete/submit" API endpoint. An attacker can force an admin to dele...
PT-2024-18848 · Oracle · Peoplesoft Enterprise Cc Common Application Objects
Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise CC Common Application Objects version 9.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks can...
SLiMS 9 Bulian SQL Injection Vulnerability
SLiMS 9 Bulian is a free and open source software from the SLiMS community in Indonesia. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. An SQL injection vulnerability exists in SLiMS 9 Bulian version v9.6.1, which...
Library Management System Security Vulnerability
Library Management System is a library management system with QR code for attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Senayan Library Management Systems 9 Bulian v9.6.1, which stems from vulnerability to SQL injectio...
TOTOLINK X6000R Security Breach
TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK X6000R version V9.4.0cu.852B20230719, which stems from the presence of a command execution vulnerability...
Open Solutions For Education openSIS Security Vulnerability
Open Solutions For Education openSIS is an open source student information management system from Open Solutions For Education. A security vulnerability exists in Open Solutions For Education openSIS Classic Community Edition v9.0, which stems from a directory traversal vulnerability that allows...
Malicious code in carvana (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 954bdf3d35f93afe84019ba5192564e1e4538bac34eafa80b8b581db0a7c8d86 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
IBM MQ Appliance Security Vulnerability
The IBM MQ Appliance is an all-in-one appliance for rapid deployment of enterprise-class messaging middleware from International Business Machines IBM. A security vulnerability exists in IBM MQ Appliance version 9.3 that stems from improper security key authentication. An attacker exploited the...
CVE-2023-5433
The Message ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticate...
WordPress Plugin Image vertical reel scroll slideshow SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
AZL-31702 CVE-2023-46246 affecting package vim for versions less than 9.0.2112-1
Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function gagrowinner in in the file src/alloc.c at line 748, which is freed in the file src/exdocmd.c in the function docmdline at line 1010 and then used again in src/cmdhist.c at line 759...
TOTOLINK X6000R Command Injection Vulnerability
The TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X6000R v9.4.0cu.652B20230116 version that stems from a remote command execution vulnerability in the method in the sub41E588 location...
PT-2023-30021 · Totolink · Totolink X6000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X6000R version 9.4.0cu.652 B20230116 Description: A remote command execution issue was discovered, which can be exploited via the sub 411994 function. Recommendations: For TOTOLINK X6000R version 9.4.0cu.652 B20230116, consider...
CVE-2022-4712
The WP Cerber Security plugin for WordPress is vulnerable to stored cross-site scripting via the log parameter when logging in to the site in versions up to, and including, 9.1. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute wheneve...