com.github.richardwill98.elasticsearch:elasticsearch-river-mongodb (1.6.2), com.github.tlrx:elasticsearch-test (0.0.7) +1 more potentially affected by CVE-2024-43709 via org.elasticsearch:elasticsearch (0.20.1)

org.elasticsearch:elasticsearch MAVEN version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwill98.elasticsearch:elasticsearch-river-mongodb 1.6.2 -...

CVE-2024-56990

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /view-medhistory.php and /admin/view-patient.php...

CVE-2024-56990

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /view-medhistory.php and /admin/view-patient.php...

PT-2025-3373 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: The issue concerns Cross Site Scripting XSS in specific API endpoints, namely "/view-medhistory.php" and "/admin/view-patient.php". This allows for potential malicious script...

CVE-2024-56990: Improper Neutralization of Input During Web Page Generation

PHPGurukul Hospital Management System 4.0 is vulnerable to Cross Site Scripting XSS in /view-medhistory.php and /admin/view-patient.php...

JetBrains TeamCity security vulnerabilities

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. JetBrains TeamCity suffers from an improper access...

CVE-2024-47113: XML Injection (aka Blind XPath Injection)

IBM ICP - Voice Gateway 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacker to send specially crafted XML statements, which would allow them to attacker to view or modify information in the XML document...

CVE-2024-26157

All versions of ETIC Telecom Remote Access Server RAS prior to 4.5.0 are vulnerable to reflected cross site scripting XSS attacks in get view method under view parameter. The ETIC RAS web server uses dynamic pages that get their input from the client side and reflect the input in their response t...

ETIC Telecom Remote Access Server Cross-site Scripting Vulnerability

ETIC Telecom Remote Access Server is a remote maintenance solution from the French company ETIC Telecom. It is designed to enable manufacturers to remotely maintain automated equipment. A cross-site scripting vulnerability exists in ETIC Telecom Remote Access Server versions prior to 4.5.0, which...

CVE-2024-26157: Improper Neutralization of Input During Web Page Generation

All versions of ETIC Telecom Remote Access Server RAS prior to 4.5.0 are vulnerable to reflected cross site scripting XSS attacks in get view method under view parameter. The ETIC RAS web server uses dynamic pages that get their input from the client side and reflect the input in their response t...

CVE-2024-57771

A cross-site scripting XSS vulnerability in the common/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-57162

Campcodes Cybercafe Management System v1.0 is vulnerable to SQL Injection in /ccms/view-user-detail.php...

CVE-2024-57776: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the /apply/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-57162: Improper Neutralization of Special Elements used in an SQL Command

Campcodes Cybercafe Management System v1.0 is vulnerable to SQL Injection in /ccms/view-user-detail.php...

PT-2025-3406 · Unknown · Campcodes Cybercafe Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Cybercafe Management System version 1.0 Description: The issue is related to SQL Injection in the "/ccms/view-user-detail.php" endpoint. This allows for potential exploitation of the system. No information is provided about the...

Campcodes Cybercafe Management System Security Vulnerabilities

Campcodes Cybercafe Management System is a cybercafe management system from Campcodes Inc. A security vulnerability exists in Campcodes Cybercafe Management System v1.0, which originates from a SQL injection in /ccms/view-user-detail.php...

CVE-2024-57162

Campcodes Cybercafe Management System v1.0 is vulnerable to SQL Injection in /ccms/view-user-detail.php...

CVE-2024-57771: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the common/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-8603: Use of a Broken or Risky Cryptographic Algorithm

A “Use of a Broken or Risky Cryptographic Algorithm” vulnerability in the SSL/TLS component used in B&R Automation Runtime versions before 6.1 and B&R mapp View versions before 6.1 may be abused by unauthenticated network-based attackers to masquerade as services on impacted devices...

PT-2025-3702 · B&R · B&R Automation Runtime +1

Name of the Vulnerable Software and Affected Versions: B&R Automation Runtime versions prior to 6.1 B&R mapp View versions prior to 6.1 Description: A "Use of a Broken or Risky Cryptographic Algorithm" issue in the SSL/TLS component may be exploited by unauthenticated network-based attackers to...