41 matches found
Wolters Kluwer LEX Baza Dokumentów 跨站脚本漏洞
Wolters Kluwer LEX Baza Dokumentów is a legal information database system developed by the German company Wolters Kluwer. The system has a cross-site scripting vulnerability, which stems from insecure handling of the cookie parameter “em”. This vulnerability may lead to cross-site scripting attac...
Wolters Kluwer A3factura 跨站脚本漏洞
Wolters Kluwer A3factura is a billing management software developed by the German company Wolters Kluwer. Wolters Kluwer A3factura has a cross-site scripting vulnerability. This vulnerability stems from a reflective cross-site scripting vulnerability present in the endpoint...
Wolters Kluwer A3factura 跨站脚本漏洞
Wolters Kluwer A3factura is a billing management software developed by the German company Wolters Kluwer. Wolters Kluwer A3factura has a cross-site scripting vulnerability. This vulnerability stems from the reflective cross-site scripting in the parameter name located at the endpoint...
EUVD-2014-8939
Malware in sbrugna...
EUVD-2023-37601
Malicious code in bioql PyPI...
EUVD-2021-30894
Malicious code in bioql PyPI...
CVE-2023-33438
A stored Cross-site scripting XSS vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML...
shop.wolterskluwer.com.au Cross Site Scripting vulnerability OBB-3885187
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-49328
On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve remote code execution via Argument Injection in the server-to-server module...
CVE-2023-49328
On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve remote code execution via Argument Injection in the server-to-server module...
Remote code execution
On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve remote code execution via Argument Injection in the server-to-server module...
CVE-2023-49328
On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve remote code execution via Argument Injection in the server-to-server module...
Wolters Kluwer B.POINT Security Vulnerability
Wolters Kluwer B.POINT is a solution for accountants and employment consultants from Wolters Kluwer Netherlands. A security vulnerability exists in Wolters Kluwer B.POINT version 23.70.00. An attacker can exploit the vulnerability to remotely execute code...
CVE-2023-49328
CVE-2023-49328 affects Wolters Kluwer B.POINT 23.70.00 on Linux on‑prem, enabling remote code execution via Argument Injection in the server‑to‑server module during authentication. Multiple sources (NVD, Red Hat, PRION, CNNVD, CVE list) describe the vulnerability and its impact as remote code exe...
CVE-2023-33438
A stored Cross-site scripting XSS vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML...
CVE-2023-33438
A stored Cross-site scripting XSS vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML...
Cross site scripting
A stored Cross-site scripting XSS vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML...
Wolters Kluwer TeamMate+ 跨站脚本漏洞
Wolters Kluwer TeamMate+ is a financial audit management software from Wolters Kluwer, a Dutch company. A security vulnerability exists in Wolters Kluwer TeamMate+ version 35.0.11.0. An attacker can exploit this vulnerability to execute arbitrary web script or HTML...
CVE-2023-33438
A stored Cross-site scripting XSS vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML...
CVE-2023-33438
CVE-2023-33438 describes a stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ version 35.0.11.0. The issue allows remote attackers to inject arbitrary web script or HTML. The connected sources consistently identify the affected product and vulnerability type, but do not p...