CVE-2026-1317 WP Import – Ultimate CSV XML Importer for WordPress <= 7.37 - Authenticated (Subscriber+) SQL Injection via File Name

The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 7.37. This is due to insufficient escaping on the filename parameter which is stored in the database during file upload and later used in raw SQL queri...

ILIAS 安全漏洞

ILIAS is an open source learning management system. A security vulnerability exists in ILIAS versions 7.x prior to 7.30 and 8.x prior to 8.11, which stems from a stored cross-site scripting XSS vulnerability that could allow a remote, authenticated attacker to inject arbitrary web script or HTML...

CVE-2021-27604

In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform Process Integration - Enterprise Service Repository JAVA Mappings, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, SAP recommends to refer this note...

HPESBST04075 rev.1 - HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G2 Tape Autoloader, Remote Cross-site Request Forgery (CSRF)

Potential Security Impact: Remote: Cross-Site Request Forgery CSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEver MSL Tape Libraries All versions prior to 7.30 HPE StoreEver 1/8 G2 Tape Autoloaders All versions prior to 5.40 CVSS Scores: | CVE | CVSS Vector | Base...

SAP NetWeaver Cross-Site Scripting Vulnerability (CNVD-2020-52934)

SAP NetWeaver is an integrated application platform based on professional standards that dramatically reduces the complexity of system integration. Its components include portals, application servers, business intelligence solutions as well as system integration and data integration technologies....