upKeeper 安全漏洞

upKeeper is a cloud-based or local solution from upKeeper Inc. A security vulnerability exists in upKeeper versions prior to 1.2, which stems from the presence of an incorrect privilege management vulnerability that allows privilege escalation...

Budget Control Gateway 授权问题漏洞

Budget Control Gateway is a gateway component of the Budget Control application from BudgetControl open source. An authorization issue vulnerability exists in Budget Control Gateway versions prior to 1.2 that stems from failure to properly validate authentication tokens, allowing an attacker to...

CVE-2024-7015

Missing Authentication for Critical Function vulnerability in Profelis Informatics and Consulting PassBox allows Authentication Abuse.This issue affects PassBox: before v1.2...

CVE-2023-5806

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mergen Software Quality Management System allows SQL Injection.This issue affects Quality Management System: before v1.2...

PT-2023-24264 · WordPress · Custom Field For Wp Job Manager

Name of the Vulnerable Software and Affected Versions: The Custom Field For WP Job Manager WordPress plugin versions prior to 1.2 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is...

CVE-2023-2963

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Oliva Expertise Oliva Expertise EKS allows SQL Injection.This issue affects Oliva Expertise EKS: before 1.2...

CVE-2022-3686

A vulnerability exists in a SDM600 endpoint. An attacker could exploit this vulnerability by running multiple parallel requests, the SDM600 web services become busy rendering the application unresponsive. This issue affects: All SDM600 versions prior to version 1.2 FP3 HF4 Build Nr. 1.2.23000.291...

CVE-2016-6204

Cross-site scripting XSS vulnerability in the integrated web server in Siemens SINEMA Remote Connect Server before 1.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...