PT-2023-4935

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.25 Description Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting XSS Vulnerability that allows an authenticated user to...

PT-2023-4941

Name of the Vulnerable Software and Affected Versions Cacti versions prior to 1.2.25 Description The issue is a Stored Cross-Site-Scripting XSS vulnerability that allows an authenticated user to poison data stored in the Cacti database. This data will be viewed by administrative Cacti accounts an...

Cacti Cross-Site Scripting Vulnerability

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. Cacti suffers from a cross-site scripting vulnerability that originates fro...

CVE-2023-40535: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script...

PT-2023-27501 · Unknown · Vi Web Client

Name of the Vulnerable Software and Affected Versions: VI Web Client versions prior to 7.9.6 Description: A stored cross-site scripting issue in the View setting page of VI Web Client allows a remote authenticated attacker to inject an arbitrary script. Recommendations: For versions prior to 7.9....

Cacti SQL Injection Vulnerability

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. Cacti suffers from a SQL injection vulnerability that stems from the fact...

io.dataease:dataease-plugin-datasource (>=1.10.0, <=1.18.9), io.dataease:dataease-plugin-interface (>=1.0, <=1.18.9) +1 more potentially affected by CVE-2023-40771 via io.dataease:dataease-plugin-common (>=1.0, <=1.18.9)

io.dataease:dataease-plugin-common MAVEN version =1.0, =1.10.0, =1.0, =1.8.0, =1.18.9 Source cves: CVE-2023-40771 Source advisory: OSV:GHSA-8RV7-G772-PP3J...

io.dataease:dataease-plugin-datasource (>=1.10.0, <=1.18.9), io.dataease:dataease-plugin-interface (>=1.0, <=1.18.9) +1 more potentially affected by CVE-2023-40771 via io.dataease:dataease-plugin-common (>=1.0, <=1.18.9)

io.dataease:dataease-plugin-common MAVEN version =1.0, =1.10.0, =1.0, =1.8.0, =1.18.9 Source cves: CVE-2023-40771 Source advisory: GHSA-8RV7-G772-PP3J...

Multiple vulnerabilities in i-PRO VI Web Client

Overview VI Web Client provided by i-PRO Co., Ltd. is Video Insight's video management software. VI Web Client contains multiple vulnerabilities listed below. Open Redirect CWE-601 - CVE-2023-38574 Reflected Cross-site Scripting CWE-79 - CVE-2023-39938 View Stored Cross-site Scripting in View...

MAL-2023-7977 Malicious code in react-navigation-area-view (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc67ff72904c84b476e3f102ad2d7c61225b500ed7e1dc8852166e2c1b88c694 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in react-navigation-area-view

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

HPESBST04532 rev.1 - HPE B-Series SANnav Management Portal and Global View, Multiple Vulnerabilities

Potential Security Impact: Remote: Arbitrary Code Execution, Authentication Bypass, Code Execution, Denial of Service DoS, Disclosure of Information, Escalation of Privilege, Multiple Vulnerabilities, Unauthorized Data Modification, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted...

CVE-2023-3253

An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application...

CVE-2023-3253: Incorrect Authorization

An improper authorization vulnerability exists where an authenticated, low privileged remote attacker could view a list of all the users available in the application...

Tenable Network Security Nessus security vulnerabilities

Tenable Network Security Nessus is an open source system vulnerability scanner from US-based Tenable Network Security. A security vulnerability exists in versions of Tenable Network Security Nessus prior to 10.6.0, which stems from an incorrect authorization vulnerability that allows an...

PT-2023-23860 · Tenable · Nessus

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An improper authorization issue exists, allowing an authenticated, low-privileged remote attacker to view a list of all users available in the...

CVE-2023-33852

IBM Security Guardium 11.4 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 257614...

UBUNTU-CVE-2023-40587

Pyramid is an open source Python web framework. A path traversal vulnerability in Pyramid versions 2.0.0 and 2.0.1 impacts users of Python 3.11 that are using a Pyramid static view with a full filesystem path and have a index.html file that is located exactly one directory above the location of t...

CVE-2023-40587

Pyramid is an open source Python web framework. A path traversal vulnerability in Pyramid versions 2.0.0 and 2.0.1 impacts users of Python 3.11 that are using a Pyramid static view with a full filesystem path and have a index.html file that is located exactly one directory above the location of t...

CVE-2023-40587

Pyramid is an open source Python web framework. A path traversal vulnerability in Pyramid versions 2.0.0 and 2.0.1 impacts users of Python 3.11 that are using a Pyramid static view with a full filesystem path and have a index.html file that is located exactly one directory above the location of t...