DInGO dLibra 跨站脚本漏洞

DInGO dLibra is a digital library system from DInGO, Inc. A cross-site scripting vulnerability exists in DInGO dLibra versions 6.0 through prior to 6.3.20, which stems from the presence of Reflective Cross-Site Scripting XSS, where an attacker may be able to use a crafted URL to cause the script ...

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server versions v6.0 through 6.0.3 that stems from...

RuvarOA 安全漏洞

RuvarOA is an office automation system of Ruvar China. A SQL injection vulnerability exists in RuvarOA v6.01 and v12.01, which is caused by a lack of validation of external SQL statements in the /WorkFlow/OfficeFileUpdate.aspx file. An attacker can exploit this vulnerability to execute illegal SQ...

Suricata 安全漏洞

Suricata is a suite of network Intrusion Detection Systems IDS, Intrusion Prevention Systems IPS, and network security monitoring engines developed by the Open Information Security Foundation OISF and its supporting vendors, which supports multi-threading, built-in IPv6, and the ability to load...

CVE-2022-35638

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 230824...

GHSA-564R-HJ7V-MCR5 Spring Framework vulnerable to denial of service via specially crafted SpEL expression

In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service DoS condition...

WordPress Plugin Galaxy Weblinks Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Rockwell Automation ISaGRAF Workbench 路径遍历漏洞

Rockwell Automation ISaGRAF Workbench is a complete programming environment for developing highly portable applications from Rockwell Automation. A path traversal vulnerability exists in Rockwell Automation ISaGRAF Workbench versions 6.0 through 6.6.9, which stems from a crafted malicious file th...

SeedDMS 跨站请求伪造漏洞

SeedDMS formerly known as LetoDMS and MyDMS is a set of open source document management system based on PHP and MySql . The system is primarily used for storing and sharing documents. A security vulnerability exists in SeedDMS versions 5.1.x through 5.1.23 and 6.0.x through 6.0.16, which originat...

CVE-2021-20494

IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow, caused by improper bounds. An authenticared user could overflow the buffer and cause the service to crash. IBM X-Force ID: 197882...

IBM Security Identity Manager 缓冲区错误漏洞

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automatically establishes, modifies, re-authenticates and terminates user privileges throughout the user lifecycle and supports scheme-based password governanc...

CVE-2021-20572

IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow the and cause the server to crash. IBM X-Force ID: 199247...

IBM Sterling Connect:Direct Windows Buffer Overflow Vulnerability

IBM Sterling Connect: Direct is a file-based peer-to-peer file transfer solution from IBM in the United States. A buffer overflow vulnerability exists in IBM Sterling Connect: Direct Windows versions 4.7, 4.8, 6.0, and 6.1, which originates from a device that allows remote attackers to cause a...

CVE-2020-2913

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-4457

IBM Jazz Foundation 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 163654...

PT-2020-6875 · Abb · Abb Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 6.0 through 6.0.2 Description: The issue is related to the storage of credentials in a recoverable format by the Redis data structure component used in ABB eSOMS. This can potentially allow an attacker to gain unauthorized...

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2019-44534)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A SQL injection vulnerability exists in IBM Sterling B2B...

Adobe Experience Manager Command Injection Vulnerability

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. A command injection vulnerability exists in Adobe Experience Manager 6.0, 6.1, 6.2, 6.3, 6.4, 6.5. An attacker can exploit this vulnerability to...

OXID eSales OXID eShop SQL Injection Vulnerability

OXID eSales OXID eShop is an online e-commerce platform from OXID eSales Germany. A SQL injection vulnerability exists in OXID eSales OXID eShop versions 6.0.x prior to 6.0.5 and 6.1.x prior to 6.1.4, which can be exploited to gain full access to the administration panel via a specially crafted U...

Adobe Experience Manager Cross-Site Request Forgery Vulnerability (CNVD-2019-30079)

Adobe Experience Manager is an enterprise content management solution that helps you simplify the management and delivery of your content and assets. A cross-site request forgery vulnerability exists in Adobe Experience Manager 6.0, 6.1, 6.2, 6.3, 6.4. An attacker can exploit this vulnerability t...