46 matches found
CVE-2025-67822
A vulnerability in the Provisioning Manager component of Mitel MiVoice MX-ONE 7.3 7.3.0.0.50 through 7.8 SP1 7.8.1.0.14 could allow an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication mechanisms. A successful exploit could allow an attacker to gai...
CVE-2025-64700
Cross-site request forgery vulnerability exists in GROWI v7.3.3 and earlier. If a user views a malicious page while logged in, the user may be tricked to do unintended operations...
CVE-2025-47220
Keyfactor SignServer (versions prior to 7.3.2) contains a local file enumeration vulnerability in the VISIBLE_SIGNATURE_CUSTOM_IMAGE_PATH used by PDFSigner and PAdESSigner. An admin user can set this path without restrictions; if the path points to an existing file readable by the application ser...
EUVD-2024-55035
An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability CWE-78 in FortiSOAR 7.6.0 through 7.6.1, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an attacker who has already obtained a non-login low privileged shell access via...
CVE-2025-58253
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Rameez Iqbal Real Estate Manager real-estate-manager allows DOM-Based XSS.This issue affects Real Estate Manager: from n/a through = 7.3...
CVE-2025-56304
Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...
WordPress plugin WP Database Backup 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
Snap One OvrC 安全漏洞
Snap One OvrC is a free cloud-based remote management and monitoring platform from US-based Snap One. A security vulnerability exists in Snap One OvrC versions prior to 7.3, which stems from the ability to impersonate a Hub device and send requests to claim and unclaim the device.The attacker can...
OpenBSD Security Vulnerabilities
OpenBSD is a cross-platform, BSD-based, UNIX-like operating system from the Canadian OpenBSD project group. A security vulnerability exists in versions prior to OpenBSD 7.3 errata 016, which stems from an l2tp message containing an AVP of incorrect length that causes a crash...
PT-2023-24102 · WordPress · Katie Seaborn Zotpress
Name of the Vulnerable Software and Affected Versions: Katie Seaborn Zotpress plugin versions = 7.3.3 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. No information is provided about the estimated number of potentially affected devices worldwide o...
IBM Spectrum Symphony 输入验证错误漏洞
IBM Spectrum Symphony is a high performance computing software system from International Business Machines IBM. A security vulnerability exists in IBM Spectrum Symphony version 7.3, which stems from incorrect validation of user input in the HOST header...
Teradek Cube 跨站脚本漏洞
Teradek Cube is a video decoder from Teradek. A security vulnerability exists in Teradek Cube version 7.3.x and prior versions. An attacker could exploit the vulnerability to execute arbitrary code via the Friendly Name field in System Information Settings...
ROS-2-2452
2.2452 Notification on the update of the Red OS OPERATION SYSTEM MIS Due to quality improvement and bug fixing, an updated version of the "RED OS" Operating System "RED OS" 7.3 antimalware protection system has been released. You can contact the technical support service within the framework of...
CVE-2021-20397
IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196017...
HPE Intelligent Management Center (iMC) operationSelect Expression Language Injection Remote Code Execution Vulnerability
HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...
HPE Intelligent Management Center (iMC) navigationTo Expression Language Injection Remote Code Execution Vulnerability
HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...
HPE Intelligent Management Center (iMC) deployselectbootrom Expression Language Injection Remote Code Execution Vulnerability
HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...
HPE Intelligent Management Center (iMC) eventinfo_content Expression Language Injection Remote Code Execution Vulnerability
HPE Intelligent Management Center iMC is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A security vulnerability exists in HPE...
HPE Intelligent Management Center (IMC) SQL Injection Code Execution Vulnerability (CNVD-2019-24039)
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An isAccountBindingWithOperator SQL injection code execution vulnerability exists in HPE Intelligent...
HPE Intelligent Management Center (IMC) Remote Code Execution Vulnerability (CNVD-2019-23773)
HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A ConfFileResource renameFile input validation remote code execution vulnerability exists in HPE Intellige...