PartKeepr 代码问题漏洞

PartKeepr is an inventory management software designed primarily for electronic components.PartKeepr suffers from a server-side request forgery vulnerability, which stems from the fact that the ability to upload attachments using a URL when creating a part does not validate whether a request can ...

UBUNTU-CVE-2021-45472

In MediaWiki through 1.37, XSS can occur in Wikibase because an external identifier property can have a URL format that includes a $1 formatter substitution marker, and the javascript: URL scheme among others can be used...

IBM Standards Processing 安全漏洞

Ibm Standards Processing Engine Ibm Transformation Extender Advanced is a document conversion software from the American company Ibm. Used to automatically convert and validate large amounts of data. A security vulnerability exists in IBM Standards Processing that stems from the engine not settin...

CVE-2021-34571

creationtimestamp| type| source ---|---|--- 2021-09-16 16:21:53+00:00| seen| https://t.me/cibsecurity/28975 2026-02-11 21:09:27+00:00| seen| https://gist.github.com/jonathan-gruber-1/49a25d08fb02011d3bf14466e69f89ba...

PT-2021-6123

Name of the Vulnerable Software and Affected Versions D-Link DIR-X1860 versions prior to v1.10WWB09 Beta Description The issue is related to a DoS attack in the web application, allowing a remote unauthenticated attacker to reboot the router by sending a specially crafted URL to an authenticated...

Fortinet FortiSandbox 安全漏洞

Fortinet FortiSandbox is an APT Advanced Persistent Threat protection appliance from Fortinet. The appliance offers dual sandboxing technology, dynamic threat intelligence system, real-time control panel and reporting. An Access Control Error vulnerability exists in Fortinet FortiSandbox that ste...

Evernote命令注入漏洞

Evernote Impression Notes is a suite of note-taking software for the macOS platform from the American company Evernote. The software allows you to create, manage, synchronize, search, and share notes anytime, anywhere. The Evernote client suffers from a command injection vulnerability that stems...

CVE-2020-11226

creationtimestamp| type| source ---|---|--- 2021-03-17 11:30:52+00:00| seen| https://t.me/cibsecurity/24993 2026-01-20 08:05:00+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2021-21312

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability within the document upload function Home Management Documents Add, or /front/document.form.php...

UBUNTU-CVE-2021-21312

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability within the document upload function Home Management Documents Add, or /front/document.form.php...

CVE-2021-21312 Stored XSS on documents

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability within the document upload function Home Management Documents Add, or /front/document.form.php...

PT-2021-14410 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 9.5.4 Description: The issue concerns a vulnerability within the document upload function, specifically the "Web Link" form field, which is not properly sanitized. This allows a malicious user with document upload right...

PT-2020-18515 · Cybermail · Cybermail

Name of the Vulnerable Software and Affected Versions: CyberMail versions 6.x through 7.x Description: The issue allows remote attackers to inject arbitrary script or HTML via a specially crafted URL, potentially leading to cross-site scripting. Recommendations: For versions 6.x through 7.x, upda...

Information disclosure

An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is an insecure mechanism for read and write access to the configuration of the device. The mechanism can be discovered by examining a link on the website of the device...

CVE-2019-4743

IBM Financial Transaction Manager 3.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link...

ZTE C520V21 Privilege Permission and Access Control Error Vulnerability

The ZTE C520V21 is a smart webcam from China's ZTE Corporation ZTE. A Permission Permission and Access Control Error vulnerability exists in the ZTE C520V21 version 2.1.14 and earlier versions, which can be exploited by an attacker to access other unauthorized files or resources by creating a URL...

CVE-2019-8995

The workspace client, openspace client, and app development client of TIBCO Software Inc.'s TIBCO ActiveMatrix BPM, TIBCO ActiveMatrix BPM Distribution for TIBCO Silver Fabric, and TIBCO Silver Fabric Enabler for ActiveMatrix BPM contain a vulnerability wherein a malicious URL could trick a user...

February 19, 2019—KB4487029 (OS Build 17134.619)

None None...

December 11, 2018—KB4471324 (OS Build 17134.471)

None None...

Infraserver Directory Traversal Vulnerability

infraserver is a RESTful server. A directory traversal vulnerability exists in infraserver. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...