Suprema BioStar 2安全漏洞

Suprema BioStar 2 is a web-based biometric security smart lock platform from Suprema Korea. A security vulnerability exists in Suprema BioStar 2 version v2.8.16, which can be exploited by an attacker to elevate privileges to the system administrator via a crafted PUT request on the configuration...

Fedora: Security Advisory for zabbix (FEDORA-2022-0d56cb7ee4)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-3001: Improper Input Validation

This vulnerability exists in Milesight Video Management Systems VMS, all firmware versions prior to 40.7.0.79-r1, due to improper input handling at camera’s web-based management interface. A remote attacker could exploit this vulnerability by sending a specially crafted http request on the target...

Safe Software FME Server 代码问题漏洞

Safe Software FME Server is a web-based data conversion application from Safe Software Canada Inc. It is used to automate data and application integration workflows in a code-free environment. A code issue vulnerability exists in Safe Software FME Server version v2022.0.1.1 and prior versions. An...

Security feature bypass

A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions to those of an administrative user. Successful exploitation of this vulnerability allows an attacker to escalate privileges beyond their...

CVE-2022-23690

The CVE-2022-23690 entry covers a vulnerability in the web-based management interface of Aruba AOS-CX that allows a remote, unauthenticated attacker to fingerprint the exact AOS-CX version running on a switch, enabling targeted follow-on actions. Affected ArubaOS-CX Switches and versions include ...

PT-2022-16194 · Aruba · Arubaos-Cx Switches

Name of the Vulnerable Software and Affected Versions: ArubaOS-CX Switches versions 10.09.1020 and below ArubaOS-CX Switches versions 10.08.1060 and below ArubaOS-CX Switches versions 10.06.0200 and below Description: A vulnerability in the web-based management interface of AOS-CX could allow a...

CVE-2022-23684: Undefined Security Weakness

A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalate their permissions to those of an administrative user. Successful exploitation of this vulnerability allows an attacker to escalate privileges beyond their...

notrinoserp 安全漏洞

notrinoserp is a web-based ERP by Phương Individual Developer, an accounting system written in PHP and MySql. A security vulnerability exists in versions prior to notrinoserp 0.7, which stems from not requiring users to use strong passwords. An attacker could exploit this vulnerability to...

Student Management System SQL注入漏洞

Student Management System is a simple web-based student management software from Sk.Amir Hamza, an individual developer in Bangladesh. Student Management System suffers from a SQL injection vulnerability that stems from the operation parameter id that causes sql injection...

notrinosrp 跨站脚本漏洞

notrinoserp is a web-based ERP by Phương Individual Developer, an accounting system written in PHP and MySql. A cross-site scripting vulnerability exists in versions prior to notrinosrp 0.7, which originates from cross-site scripting XSS...

Guest Management System 跨站脚本漏洞

Guest Management System is a web-based system designed to monitor the records of everyone entering a school or college. The Guest Management System suffers from a cross-site scripting vulnerability that stems from the manipulation of the parameter name in an unknown portion of its myform.php...

Guest Management System 安全漏洞

Guest Management System is a web-based system designed to monitor the records of everyone entering a school or college. The Guest Management System has a security vulnerability that stems from an unknown function of its code storing user passwords in the database in plaintext...

CVE-2022-20869

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...

CVE-2022-20869

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...

CVE-2022-20869 Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...

CVE-2022-20869

CVE-2022-20869 affects Cisco BroadWorks Application Delivery Platform Software, specifically its web-based management interface. The vulnerability is a cross-site scripting flaw caused by insufficient input validation, allowing an unauthenticated, remote attacker to persuade a user to click a cra...

CVE-2022-20869 Cisco BroadWorks Application Delivery Platform Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...

CVE-2022-20869: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface. This vulnerability exists because the web-based management...

GHSA-J47C-J42C-MWQQ Solana Pay Vulnerable to Weakness in Transfer Validation Logic

Description When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient, using the supplied validateTransfer function. An edge case regarding this mechanism could cause the validation logic to validate multiple...