CVE-2022-20666: Improper Neutralization of Input During Web Page Generation

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector CSPC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient...

Cisco Expressway Series / TelePresence VCS Multiple Vulnerabilities (cisco-sa-expressway-filewrite-bsFVwueV)

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device, as follows: - An...

CVE-2022-20809

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about...

CVE-2022-20809

Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) have a CVE-2022-20809 vulnerability in their API and web-based management interfaces that could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. The issue...

Talend Administration Center 跨站脚本漏洞

Talend Administration Center is a web-based application from Talend that centralizes studio management. A cross-site scripting vulnerability exists in Talend Administration Center that stems from a lack of filtering and escaping of user-submitted data by the SSO login endpoint...

Dolibarr ERP and CRM malicious executable loading

Dolibarr ERP/CRM 9.0.1 provides a web-based functionality that backs up the database content to a dump file. However, the application performs insufficient checks on the export parameters to mysqldump, which can lead to execution of arbitrary binaries on the server. Malicious binaries can be...

GHSA-2RWH-262R-R85J Dolibarr ERP and CRM malicious executable loading

Dolibarr ERP/CRM 9.0.1 provides a web-based functionality that backs up the database content to a dump file. However, the application performs insufficient checks on the export parameters to mysqldump, which can lead to execution of arbitrary binaries on the server. Malicious binaries can be...

Cisco Common Services Platform Collector跨站脚本漏洞（CNVD-2022-50665）

Cisco Common Services Platform Collector CSPC is a common services platform data collector from Cisco USA. The product analyzes network performance and identifies risks and vulnerabilities by polling basic inventory and configuration data from Cisco devices.Cisco Common Services Platform Collecto...

SPIP cross-site scripting vulnerability

SPIP is a web-based content publishing system. A cross-site scripting vulnerability exists in SPIP version 3.1.13 and prior versions, which originates in /spip.php. The vulnerability stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could use...

SPIP remote code execution vulnerability

SPIP is a Web-based content publishing system used primarily for online collaboration. A remote code execution vulnerability exists in versions of SPIP prior to 3.2.8, which are primarily used for online collaboration. The vulnerability stems from the oups parameter of /ecrire not properly...

Cisco Secure Network Analytics Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Secure Network Analytics, formerly Cisco Stealthwatch Enterprise, could allow an authenticated, remote attacker to execute arbitrary commands as an administrator on the underlying operating system. This vulnerability is due to...

Cisco Common Services Platform Collector Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector CSPC Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. These vulnerabilities are due to insufficient...

PT-2022-2861

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of the software, which could allow an unauthenticated,...

PT-2022-3758

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Common Services Platform Collector CSPC Software...

PT-2022-2859

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote...

PT-2022-2703

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote...

PT-2022-4320

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is related to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remot...

HMS SQL Injection Vulnerability

HMS is a computer or web-based hospital management system. version 1.0 of HMS is vulnerable to SQL injection, which stems from the presence of multiple parameters that can lead to SQL injection when requesting appointment.php using the POST method. An attacker could use this vulnerability to obta...

PT-2022-2860

Name of the Vulnerable Software and Affected Versions Cisco Common Services Platform Collector CSPC Software affected versions not specified Description The issue is due to insufficient validation of user-supplied input by the web-based management interface, allowing an unauthenticated, remote...

PT-2022-4255

Name of the Vulnerable Software and Affected Versions Cisco Secure Network Analytics, formerly Cisco Stealthwatch Enterprise, affected versions not specified Description The issue is due to insufficient user input validation by the web-based management interface of the affected software. An...