File Upload Vulnerability in Record Management System V3.1 of Shanghai Chuangqi World Technology Co.

Trunkey ICP/IP address information filing management system is a set of ISP service provider enterprise side filing management system. A file upload vulnerability exists in the filing management system V3.1 of Shanghai Trunkey Technology Co...

OPENSUSE-SU-2020:0079-1 Security update for glusterfs

This update for glusterfs fixes the following issues: glusterfs was update to release 3.12.15: Fixed a number of bugs and security issues: - CVE-2018-1088, CVE-2018-1112 boo1090084, CVE-2018-10904 boo1107018, CVE-2018-10907 boo1107019, CVE-2018-10911 boo1107020, CVE-2018-10913 boo1107021,...

MGASA-2020-0012 Updated upx packages fix security vulnerability

The updated package fixes security vulnerabilities: An Integer overflow in the getElfSections function in pvmlinx.cpp in UPX 3.95 allows remote attackers to cause a denial of service crash via a skewed offset larger than the size of the PE section in a UPX packed executable, which triggers an...

File Upload Vulnerability in Laike E-commerce Management System v3.3 of Pickup Network Technology Co.

Laike e-commerce management system can be customized multi-terminal full-scene mall, focusing on interface aesthetics and user experience. A file upload vulnerability exists in the Laikai E-commerce Management System v3.3 of Pickup Network Technology Limited, which can be exploited by attackers t...

CVE-2019-20223

In Support Incident Tracker SiT! 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235...

Support Incident Tracker Cross-Site Scripting Vulnerability (CNVD-2020-04723)

Support Incident Tracker SiT! is a PHP and MySQL based technical support phone/email tracking system. A cross-site scripting vulnerability exists in the 'id' parameter in version 3.67 of SiT! The vulnerability stems from the lack of proper validation of client-side data by the WEB application,...

McAfee Threat Intelligence Exchange Server Authorization Issues Vulnerability

McAfee TIE Server is a network threat defense server from the U.S. company McAfee McAfee. An authorization issue vulnerability exists in the API in McAfee Threat Intelligence Exchange Server version 3.0.0. The vulnerability stems from a lack of authentication measures or insufficient authenticati...

NeuVector Authentication Vulnerability

NeuVector is an end-to-end container security platform from US-based NeuVector. The platform includes features such as image vulnerability management, access control and container process/filesystem protection. A security vulnerability exists in NeuVector version 3.1. The vulnerability can be...

IBM Financial Transaction Manager for SWIFT Services Clickjacking Vulnerability

IBM Financial Transaction Manager for SWIFT Services is a financial transaction manager product from IBM in the United States. The product is primarily used for monitoring, tracking and reporting financial payments and transactions. A clickjacking vulnerability exists in IBM Financial Transaction...

CVE-2019-16558

Jenkins Spira Importer Plugin 3.2.3 and earlier disables SSL/TLS certificate validation for the Jenkins master JVM...

PT-2019-14480 · Intesync · Intesync Solismed

Name of the Vulnerable Software and Affected Versions: Intesync Solismed version 3.3sp Description: The issue is related to cross-site scripting XSS. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized...

YARA has unspecified vulnerabilities

YARA is a set of tools used to help software researchers identify and categorize malware samples. A security vulnerability exists in the machoparsefile function of the macho/macho.c file in YARA version 3.11.0. The vulnerability can be exploited by an attacker to cause out-of-bounds memory access...

Unspecified Vulnerability in TemaTres

TemaTres is an open source vocabulary server. A security vulnerability exists in TemaTres version 3.0, which can be exploited by remote attackers to create administrator accounts...

TemaTres Cross-Site Scripting Vulnerability

TemaTres is an open source vocabulary server. A cross-site scripting vulnerability exists in TemaTres version 3.0, which can be exploited by an attacker to execute client-side code...

CVE-2019-14345

TemaTres 3.0 allows remote unprivileged users to create an administrator account...

PT-2019-15720 · Cyrus +5 · Cyrus Imap +5

Name of the Vulnerable Software and Affected Versions: Cyrus IMAP versions 2.5.x through 2.5.13 Cyrus IMAP versions 3.x through 3.0.11 Description: The issue allows privilege escalation because an HTTP request may be interpreted in the authentication context of an unrelated previous request that...

S-CMS enterprise website building system v3.0 backend has SQL injection vulnerability (CNVD-2019-45336)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS v3.0 background SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

CVE-2019-5644

Computing For Good's Basic Laboratory Information System also known as C4G BLIS version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may alter several facets of a user account, including promoting any user to an administrator...

SQL Injection Vulnerability in XYHCMS 3.6

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system, simple and easy to use. XYHCMS 3.6 SQL injection vulnerability , an attacker can exploit the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Seven Bears Library System v3.4

Seven bears is similar to Baidu library, can realize the document sharing, selling library CMS system. After the user uploads the source document, seven bears will automatically transcode the document into HTML, after the success of the document HTML back to the library CMS. to realize...