PT-2022-16851 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 6.4.8.2 Description: The issue is a result of improper API route checking, allowing modification of customers and creation of orders without App Permission. This affects Shopware, an open commerce platform based on...

SalesAgility SuiteCRM 安全漏洞

Salesagility SalesAgility SuiteCRM is a suite of enterprise-grade, open source Customer Relationship Management CRM from Salesagility UK. A security vulnerability exists in SalesAgility SuiteCRM that stems from incorrect authorization in the GitHub repository salesagility suitecrm prior to 7.12.5...

Cisco stands on guard with our customers in Ukraine

As the Russia-led invasion intensifies, Ukraine is being attacked by bombs and bytes. Cisco is working around the clock on a global, company-wide effort to protect our customers there and ensure that nothing goes dark. Cisco Talos has taken the extraordinary step of directly operating security...

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

CVE-2022-25394

CVE-2022-25394 affects the Medical Store Management System v1.0. The vulnerability is a SQL injection in the cid parameter of customer-add.php, with CVSS-3.1 base score 9.8 (CRITICAL) and high impact on confidentiality, integrity, and availability. The attack vector is network and requires no pri...

CVE-2022-25394: Improper Neutralization of Special Elements used in an SQL Command

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

Data breaches leave customers very shaky, report says

Data breaches are one of the most reported cyberattacks against businesses—regardless of size and industry. And while this has highlighted cybersecurity gaps on so many fronts, some companies are still not prioritizing them as they should. Some have scrambled to be compliant but then find...

Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Program Management (CVE-2021-35557)

Summary IBM Emptoris Program Management supports Oracle database server as a backend database. The remediated version of Oracle database server has been certified by IBM Emptoris Program Management. Vulnerability Details CVEID: CVE-2021-35557 DESCRIPTION: An unspecified vulnerability in Oracle...

WordPress Product Customer List for WooCommerce plugin < 3.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Product Customer List for WooCommerce plugin versions 3.0.0. Solution Update the WordPress Product Customer List for WooCommerce plugin to the latest available version at least 3.0.0...

WordPress PureDevs Customer History for WooCommerce plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress PureDevs Customer History for WooCommerce plugin versions = 1.0.0. Solution Update the WordPress PureDevs Customer History for WooCommerce plugin to the latest available version at least 1.0.1...

WordPress Pickup & Delivery from Customer Locations for WooCommerce plugin <= 1.0.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Pickup & Delivery from Customer Locations for WooCommerce plugin versions = 1.0.1. Solution Update the WordPress Pickup & Delivery from Customer Locations for WooCommerce plugin to the latest available version at least 1.0.2...

WordPress "Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer" plugin <= 1.0.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress "Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer" plugin versions = 1.0.0. Solution No patched version available...

WordPress Customer Chat Facebook plugin <= 1.1.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Customer Chat Facebook plugin versions = 1.1.1. Solution No patched version available...

WordPress "FeedbackScout: The easiest way to collect, prioritise, manage and track customer feedback." plugin <= 1.9.3 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress "FeedbackScout: The easiest way to collect, prioritise, manage and track customer feedback." plugin versions = 1.9.3. Solution No patched version available...

WordPress "Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer" plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress "Woocommerce Customer Reviews with Artificial Intelligence analyzis, with IBM Watson Tone Analyzer" plugin versions = 1.0.0. Solution No patched version available...

WordPress PureDevs Customer History for WooCommerce plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress PureDevs Customer History for WooCommerce plugin versions = 1.0.0. Solution Update the WordPress PureDevs Customer History for WooCommerce plugin to the latest available version at least 1.0.1...

WordPress Customer Chat Facebook plugin <= 1.1.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Customer Chat Facebook plugin versions = 1.1.1. Solution No patched version available...

PT-2022-15683 · Cybonet · Pineapp Mail Relay

Name of the Vulnerable Software and Affected Versions: Cybonet - PineApp Mail Relay affected versions not specified Description: The issue concerns an unauthenticated SQL injection vulnerability. An attacker can send a request to specific API endpoints, such as...

FATEK Automation FvDesigner

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: FATEK Automation Equipment: FvDesigner Vulnerabilities: Stack-based Buffer Overflow, Out-of-bounds Write, Out-of-bounds Read 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to...